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United States District Court 


for the 

Southern District of New York 


In the Matter of the Search of 

(Briefly describe the property to be searched 
or identify the person by name and address) 

Loews Regency Hotel, 540 Park Avenue, Room 
1628 



APPLICATION FOR A SEARCH AND SEIZURE WARRANT 

property to be searched and give its location). 

Loews Regency Hotel, 540 Park Avenue, Room 1628, a Suite that Encompasses Rooms 1628,1629, and 1630 New York, New York 10065 

New York , there is now concealed (identify the 


"locatedinthe- 


-Seuthern- 


District of 


person or describe the property to be seized). 

See Attached Affidavit and its Attachment A 


The basis for the search under Fed. R. Crim. P. 41 (c) is (check one or more): 
S'evidence of a crime; 

S^contrabaad, fruits of crime, or other items illegally possessed, 

3'property designed for use, intended for use, or used in committing a crime; 
□ a person to be arrested or a person who is unlawfully restrained. 


The search is related to a violation of: 

cod'Sana#) Offense Description^) 

18 use 371 .-loos, 1014,1343, Conspiracy, false bank entries, false statements to a financial 
1344; 52 use 30116 and 30109 institution, wire fraud, bank fraud, and illegal campaign contributions 


The application is based on these facts: 
See Attached Affidavit and its Attachment A 


sf Continued on the attached sheet. 

O Delayed notice of 30 days (give exact ending date if more than 30 days:^ 


under 18 U.S.C. § 3103a, the basis of which is set forth on the attached sheet. 


) is requested 



Sworn to before me and signed in my presence. 
Date: ^(ll, 

City and state: New York, NY _ 



i 



Judge's signature 


fomor-tA U BkW p 'V.r^n 

Printed name md tide 
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UNITED STATES DISTRICT COURT 
SOUTHERN DISTRICT OF NEW YORK 


In the Matter of the Application of the United 
States of America for a Search and Seizure 
Warrant for the Premises Known and Described 
as Loews Regency Hotel, 540 Park Avenue, 
Room 1628, a Suite that Encompasses Rooms 
1628, 1629, and 1630 New York, New York 
10065, and Any Closed Containers/Items 
Contained Therein 
Reference No. 2018R00127 


TO BE FILED UNDER SEAL 

Agent Affidavit in Support of 
Application for Search and Seizure 

Warrant 


SOUTHERN DISTRICT OF NEW YORK) ss.: 



S pecial Agent Federal Bureau of Investigation, bei ng duly sworn, . 


deposes and says: 

I. Introduction 


A. Affiant 



2. On or about April 8, 2018, the Honorable Henry B. Pitman, United States 
Magistrate Judge, issued a search and seizure warrant for die premises known and described as 
Loews Regency Hotel, 540 Park Avenue, Room 1728, New York, New York 10065, and Any 
Closed Containers/Items Contained Therein. The warrant and my supporting affidavit (the 
“Affidavit”) are appended hereto. The Affidavit is incorporated herein by reference in its entirety 
as Exhibit A, 
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3. On or about April 9 , 2018, based upon a conversation with another law enforcement 
agent who spoke to an employee of Loews Regency Hotel, I learned that Michael Cohen is in fact 
staying in Room 1628 (in a suite encompassing rooms 1628,1629, and 1630) (collectively, “Room 
1628”), not Room 1728. Accordingly, I respectfully submit the attached amended warrant 
pursuant to Rule 41 of the Federal Rules of Criminal Procedure for the following Subject Premises: 
Loews Regency Hotel, 540 Park Avenue, Room 1628, New York, New Yoik 10065, and Any 
Closed Containers/Items Contained Therein (“Subject Premises-4”). For the reasons detailed in 
the Affidavit and herein, I believe that there is probable cause to believe that Subject Premises-4 
containsevidence, fruits, and instrumentalities ofviolations of 18U.S.G. §§ 1005 (false bank 
entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 (bank fraud) 
(collectively, the “Bank Fraud Offenses”), 52 U.S.C, §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) 
(illegal campaign contributions) (the “Campaign Finance Offenses”), and 18 U.S.C. §§ 371 
(conspiracy as it pertains to the other Subject Offenses) (collectively, the “Subject Offenses”). 

4. Based on the foregoing, I respectfully request the court to issue a warrant to seize 
the items and information specified in Attachment A to this affidavit and to the Search and Seizure 
Warrant. 
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5. In light of the confidential nature of the continuing investigation, I respectfully 
request that this affidavit and all papers submitted herewith be maintained under seal until the 
Court orders otherwise* 


Sworn to before me on 
9th day of April, 2018 


r f 



Special Agent 
FBI 



HON. IIENHY B. PITMAN 

UNITED STATES MAGISTRATE JUDGE 
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ATTACHMENT A 

I, Premises to be Searched—Subject Premlses-4 

The premises to be searched (“Subject Premises-4”) are described as follows, and include 
electronic devices, and all locked and closed containers found therein: 

Room 1628 (a suite encompassing rooms 1628, 1629, and 1630) (collectively, “Room 
1628”), located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 
10065. The building is a luxury hotel located on Parle Avenue and 61st Street. Subject Premises- 
4 is located on the 16th floor of the hotel. 

II. Items to Be Seized 

A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 

The items to be se ized from Sub j e ct Premises- 4 are evidence, fruit s, and instrumentalities 
of violations of 18 U.S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 
medallions, from January 1,2013 to the present. 

b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or 
entities associated with him to tr ansfer any interest in taxi medallions, and any associated debts or 
liabilities, to others, including to H^Hj^^Brnd/or entities associated with him. 

c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

e. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 

g. Evidence relating to agreements, loans, and/or financial t ransactions between 

Cohen and and/or entities controlled by I 

2 
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relating to Cohen’s bank accounts, taxes, debts, and/or finances, from January 1, 2013 to the 
present. 


p. Communications, records, documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; die source of fluids flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1,2013 to the present. 

q. Evidence of Cohen’s intent as it relates to die Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information falling within the categories 
set forth in Section n A of this Attachment above, including, but not limited to, a MacBook Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk 
drives, thumb drives, and personal digital assistants, hi lieu of seizing any such computer devices 
or storage media, this warrant also authorizes the copying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media, including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 

3. Any evidence concerning the identities or locations of those persons with access to, 
control over, or ownership of the seized or copied computer devices or storage media. 


C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel assisting the government in this investigation, and outside technical experts under 
government control) are authorized to review the ESI contained therein for information responsive 
to the warrant. 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example: 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• ope nin g or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through all electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
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Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Sections 
ILA and 1I.B of this Attachment. However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “filter team,'' separate and apart from the investigative team, in order to 
address potential privileges. 


2017.0S.02 
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UNITED STATES DISTRICT COURT 
SOUTHERN DISTRICT OF NEW YORK 


In the Matter of the Application of the United 
States of America for a Search and Seizure 
Warrant for the Premises Known and Descr ibed 
as (1) 502 Park Avenue, 

York, New York 10022, (2) Michael Cohen’s 
Office at 30 Rockefeller Plaza, 23rd Floor, New 
York, New York 10112, (3) Safe Deposit Box # 
I Located at the TD Bank Branch at 500 Park 
/vvenue. New York, New York 10019, and (4) 
Loews Regency Hotel, 540 Park Avenue, Room 
1728, New York, New York 10065, and Any 
Closed Containers/Items Contained Therein, and 
the Electronic Devices Known and Described as 
(1) an Apple iPhone with Phone Number 
^^^^■and (2) an Apple iPhone with Phone 


TO BE FILED UNDER SEAL 

Agent Affidavit in Support of 
Application for Search and Seizure 

Warrant 


Number 

Reference No. 2018R00127 


SOUTHERN DISTRICT OF NEW YORK) ss.: 

Special Agent, Federal Bureau of Investigation, being duly sworn, 

deposes and says: 


I. Introduction 


A. Affiant 



2. I make this Affidavit in support of an application pursuant to Rule 41 of the Federal 
Rules of Criminal Procedure for a warrant to search the premises specified below (the ‘‘Subject 


2017.08.02 


2 










Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 11 of 201 


Premises”) and the electronic devices specified below (the “Subject Devices”) for, and to seize, 
the items and information described in Attachments A, B, C, D, E and F. This affidavit is based 
upon my personal knowledge; my review of documents and other evidence; my conversations with 
other law enforcement personnel; and my training, experience and advice received concerning the 
use of electronic devices in criminal activity and the forensic analysis of electronically stored 
information (“ESI”). Because this affidavit is being submitted for the limited purpose of 
establishing probable cause, it does not include all the facts that I have learned during the couise 
of my investigation. Where the contents of documents and the actions, statements, and 
conversations of others are reported herein, they are reported in substance and in part, except where 
otherwise indicated. 

B. The Subject Premises and Subject Devices 

3. Subject Premises-1, Subject Premises-2, Subject Premises-3 and Subject Premises- 

4 (collectively, the “Subject Premises”) are particularly described as: 

a. Subject Premises-1 is Apartment | located inside the building at 502 
Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32- 
floor brick residential building. Subject Premises-1 is located on the floor of the building. 
Based on my review of New York City property records, I have learned that Michael Cohen arid 
Laura Cohen own Subject Premiscs-1. 1 Additionally, as described below, Subject Preinises-l is 
Cohen’s full-time residence. 

b. Subject Premises-2 is an office located on the 23rd floor of the building at 
30 Rockefeller Plaza, New York, New York 10112. The building located at 30 Rockefeller Plaza 


1 As noted infra, I have learned that on or about October 28, 2015, Cohen transferred Subject 
Premises-1 into a trust. 
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is a 66-floor office building that spans the entire block between Sixth Avenue and Rockefeller 
Plaza. Subject Premises-2 is located on the 23rd floor of the building inside of the offices of the 
law firm Squire Patton Boggs. The office is assigned to Michael Cohen. As described below, 
Michael Cohen works and conducts meetings at Subject Premises-2. 

c. Subject Premises-3 is a safety deposit box located inside the TD Bank 
branch location at 500 Park Avenue, New York, New York 10019. Based on my review of records 
maintained by TD Bank, f have learned that the safety-deposit box is approximately five inches by 
ten inches in size, and is marked as box The safety deposit box is in the name of Michael 
Cohen and Laura Cohen. 

d. Subject Premises-4 is Room 1728 located inside the Loews Regency Hotel 
at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park 
Avenue and 61st Street. Subject Premises-4 is located on the 17th floor of the hotel. Based on my 
review of emails obtained pursuant to search warrants described below, I have learned that on or 
about January 5, 2018, Cohen received an email from an employee of Loews Regency, which 
included a price quote for a long-term stay suite based on a three-month stay from January 8 to 
April 8,2018. 2 On or about January 29,2018, Cohen sent an email to a Loews Regency employee, 
stating, in pertinent part: “I just spoke to my wife and she has scheduled the move for Thursday. 
Please mark down that we will be taking possession on Thursday, February 1st.” Based on my 
review of cell phone location data, I have learned that, over the past 24 hours, two cellular phones 
used by Cohen have been located in the vicinity of Subject Premises-4. In particular, on or about 


2 Although the quoted price contemplated a three-month stay from January 8 to April 8, it appears 
that Cohen did not move in until February 1, and as of today, April 8, cellphone location 
information demonstrates that Cohen’s cellular phones are in still in the vicinity of Subject 
Premises-4. 
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April 8, 2018, law enforcement agents using a “triggerfish” device identified Room 1728 as the 
room within the hotel in which the Subject Devices are most likely present. 3 

e. Therefore, I believe that Cohen is temporarily residing in Subject 


Premises-4. 

4. Subject Device-1 and Subject Device-2 (collectively, the “Subject Devices”) are 


particularly described as; 

-a;—Subject Device-1 is an Apple iPhone serviced by AT&T with the telephone number 

Based on my review of records maintained by AT&T, 1 have learned that Subject 
Device-1 is subscribed to Michael Cohen. Based on my review of cellphone location information 
maintained by AT&T, I have learned that Subject Device-1 is presently located in the Southern 
District of New York. 

b. Subject Device-2 is an Apple iPhone serviced by AT&T with the telephone number 
Based on my review of records maintained by AT&T, I have learned that Subject 
Device-2 is subscribed to Michael Cohen. Based on my review of cellphone location information 
maintained by AT&T, I have learned that Subject Device-2 is presently located in the Southern 


District of New Y ork. 

c. Based on my training, experience, and research, and from consulting the 
manufacturer’s and service providers’ advertisements and product technical specifications 
available online, I know that the Subject Devices have capabilities that allow them to, among other 
things: make and receive telephone calls; save and store contact information; send and receive 


3 Based on my conversations with these agents, I understand that it is also possible that the Subject 
Devices are one floor below, in Room 1628. However, as noted, l understand that Cohen received 
a price quote for a long-term stay suite and is residing there with his family. Based on my 
conversations with FBI agents conducting surveillance, I understand that Room 1728 appears to 
be a suite, whereas Room 1628 appears to be a standard room. 

5 
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emails and text messages; download and run mobile telephone applications, including encrypted 
call and messaging application such as WhatsApp, Signal, and Dust; take, send, and receive 
pictures and videos; save and store notes and passwords; and store documents. 

C. The Subject Offenses 

5. For the reasons detailed below, I believe that there is probable cause to believe that 
the Subject Premises and Subject Devices contain evidence, fruits, and instrumentalities of 
violations of 18 UrS.Gr^§§ 1005 (false bank entries), 1014 (false-statements to a financial 
institution), 1343 (wire fraud), and 1344 (bank fraud) (collectively, the “Bank Fraud Offenses”), 
52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)( 1)(A)( 1) (illegal campaign contributions) (the 
“Campaign Finance Offenses”), and 18 U.S.C. §§ 371 (conspiracy as it pertains to the other 
Subject Offenses) (collectively, the “Subject Offenses”). 

D. Prior Applications 

6. The FBI and the United States Attorney’s Office for the Southern District of New 
York (“USAO”) have been investigating several courses of criminal conduct by Michael Cohen. 
Cohen is an attorney who currently holds himself out as the personal attorney for President Donald 
Trump, and who previously served for over a decade as an executive in the Trump Organization, 
an international conglomerate with real estate and other holdings. 

7. In connection with an investigation then being conducted by the Office of the 
Special Counsel (“SCO”), the FBI sought and obtained from the Honorable Beryl A. Howell, Chief 
United States District Judge for the District of Columbia, three search warrants for emails and 
other content information associated with two email accounts used by Cohen, and one search 
warrant tor stored content associated with an iCloud account used by Cohen. Specifically. 
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a. On or about July 18,2017, the FBI sought and obtained a search warrant for 


emails in the account 


l@gmail.com (the “Cohen Gmail Account”) sent or received 
between January 1, 2016 and July 18, 2017 (the “First Cohen Gmail Warrant”). 

b. On or about August 8, 2017, the FBI sought and obtained a search warrant 

■@gmail.com (the 


for content stored in the iCloud account associated with Apple ID 
“Cohen iCloud Account” and the “Cohen iCloud Warrant”). 

— c. On or about November 13, 2017, die FBI sought and-obtained-a search 
warrant for emails in the Cohen Gmail Account sent or received between June 1, 2015 and 
November 13, 2017 (the “Second Cohen Gmail Warrant”). 

d. On or about November 13, 2017, the FBI sought and obtained a search 


warrant for emails in the account 


I (the “Cohen MDCPC Account”) sent or 


received between the opening of the Cohen MDCPC Account 4 and November 13,2017 (the Fiist 
Cohen MDCPC Warrant”). 

8. The SCO has since referred certain aspects of its investigation into Cohen to the 
USAO, which is working with the FBI’s New York Field Office. As part of that referral, on or 
about February 8, 2018, the SCO provided the USAO with all non-privileged emails and other 
content information obtained pursuant to the First Cohen Gmail Warrant, Second Cohen Gmail 

(f • vi'*• 

Warrant, and Cohen MDCPC Warrant. On or about March 7, 2018, the SCO provided the USAO 


4 Based on my review of this warrant and the affidavit in support of it, I know that the warrant did 
not specify a tune period, but the affidavit indicated that, pursuant to court order, the service 
provider had provided non-content information for the Cohen MDCPC Account that indicated that 
the account contained emails from the approximate period of March 2017 through the date of the 
warrant. 
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with all non-privileged content obtained pursuant to the Cohen iCloud Warrant. * 5 A filter team 
working with the SCO had previously reviewed the content produced pursuant to these warrants 

for privilege. 

9. On or about February 28,2018, the USAO sought and obtained search warrants for 
emails in the Cohen Gmail Account and the Cohen MDCPC Account, among other accounts, sent 
or received between November 14,2017 and February 28,2018 (the “ rhird Cohen Gmail Warrant 
and the “Second-Cohen MDCPC Warrant”). The content produced pursuant to these warrants is- 
subject to an ongoing review for privilege by an SDNY filter team. 6 

10. The emails search warrants described above are referred to collectively as the 

“Cohen Email Warrants.” 

11. On or about April 7, 2018, the USAO and FBI sought and obtained a warrant for 
prospective and historical cellphone location information for Subject Device-1 and Subject 
Device-2. On or about April 8,2018, the USAO and FBI sought and obtained authority to employ 
an electronic technique, commonly known as a “triggerfishto determine the location of Subject 
Device-1 and Subject Device-2. 

II. Probable Cause 
A. Overview 

12. The United States Attorney’s Office for the Southern District of New Y ork and FBI 
are investigating, among other things, schemes by Target Subject Michael Cohen (a) to defraud 
multiple banks from in or about 2016 up to and including the present, and (b) to make an illegal 

s The SCO had previously provided a subset of this non-privileged content on or about February 

2, 2018. 

6 On or about February 28, 2018 and April 7, 2018, the USAO and FBI sought and obtained Rule 
41 search warrants authorizing the search of emails and content obtained pursuant to previously 
issued warrants for additional subject offenses. 
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campaign contribution in October 2016 to then-presidential candidate Donald Tramp. As noted, 
Cohen is an attorney who currently holds himself out as the personal attorney for President Donald 
Tramp, and who previously served for over a decade as an executive in the Tramp Organization, 
an international conglomerate with real estate and other holdings. 

13. The investigation has revealed that Cohen has made affirmative misrepresentations 
in and omitted material information from financial statements and other disclosures that Cohen 
provided to~multiple banks-in connection with a transaction intended to-relieve Cohen of 
approximately $22 million in debt he owed on taxi medallion loans from the banks. As set forth 
in detail below, in these financial statements, and in his oral and other written statements to these 
banks, Cohen appears to have (i) intentionally misrepresented his ability to pay cash by failing to 
disclose cash he began receiving in 2017 from new consulting work; (ii) significantly understated 
his total holdings of cash and cash equivalents; (iii) failed to disclose tens of thousands ot dollais 
he received in monthly interest income, and (iv) failed to inform the banks from which he was 
seeking debt relief that he had agreed to make a $3.8 million cash payment to a third party, HH 
Jin connection with ^^^^^^icquisition of the taxi medallions securing Cohen’s 
debt. By making these misrepresentations and material omissions, Cohen avoided making 


monthly payments on his loans, and attempted to fraudulently induce the banks to lelieve him of 
certain repayment obligations and personal guarantees that Cohen and his wife had signed. 
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15. Based on my review of emails obtained from the Cohen Email Warrants, 
information obtained pursuant to the iCloud Warrant, and documents produced pursuant to 
subpoenas, as well as my review of public sources, I have learned that Cohen has used the Subject 


Premises to (a) receive documents related to the transaction intended to relieve Cohen of his taxi 
medallion debt, (b) receive documents and/or conduct meetings related to his consulting work, (c) 
receive documents and/or conduct meetings relating to his finances and assets, some of which, as 
noted above and as detailed further herein, he has concealed from the banks in connection with the 
refinancing of his taxi medallion debt, (d) | 

| and (e) house and operate electronic devices that were utilized in connection with, among 
other things, the taxi medallion transaction, Cohen’s consulting work, and 

Specifically, as described below. Subject Premises-1 likely contains evidence concerning Cohen’s 
taxi medallion loans, his negotiations with banks, his personal finances, his consulting work, his 
tax returns, and . as well as electronic devices containing such evidence, 

all of which constitute or contain evidence of the Subject Offenses. Additionally, as described 
below. Subject Premises-2 likely contains evidence relating to Cohen’s consulting work, his 
finances, and as well as electronic devices containing such evidence. 

Subject Premises-3, as described below, likely contains evidence relating to Cohen’s assets and 
finances, including assets that may not have been disclosed to banks in connection with the 
refinancing of Cohen’s taxi medallion debt or documents relating to such assets, and documents 
or evidence related to Subject Premises-4 likely contains electronic 


2017.08.02 


10 










Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 19 of 201 


devices, including Subject Device-1 and Subject Device-2, which themselves contain evidence of 
the Subject Offenses, including concerning Cohen’s taxi medallion loans, his negotiations with 
banks, his personal finances, his consulting work, his tax returns, and 

Accordingly, and as set forth in more detail below, there is probable cause to believe that the 
Subject Premises and Subject Devices will include evidence of the Subject Offenses. 

B. Probable Cause Regarding Subjects’ Commission of the Subject Offenses 7 

-The Bank Fraud Scheme— 

(i) Cohen’s Statements to Sterling National Bank 
16. As set forth in detail below, in 2014, Cohen, through LLCs controlled by him and 
his wife, Laura Cohen, entered into a series of loans from Sterling National Bank ( Sterling ) and 
the Melrose Credit Union (“Melrose”), secured by taxi medallions, for approximately $20 million. 
Though entered into by LLCs, the loans were also secured by personal guarantees in the names of 
both Cohen and his wife. Over time, as the taxi industry weakened and the medallions lost value, 
Cohen sought to renegotiate the terms of those loans and/or relieve himself from their obligations, 
including the personal guarantees. As part of that effort, Cohen made a series of representations 
to Sterling and Melrose about his net worth, assets, available cash and income, among other things. 
Specifically, based on my review of records maintained by Sterling and Melrose, and public 
sources concerning the taxi industry and the value of taxi medallions, as well as my participation 
in interviews with a Sterling executive vice-president (the “Sterling Employee-1”) and two other 


7 In the following recitation of probable cause, I frequently refer to phone calls or text messages 
involving Cohen. The text messages described herein as sent or received by Cohen were all sent 
or received from the telephone numbers associated with Subject Device-1 or Subject Device-2. 
The vast majority of the phone calls described herein made or received by Cohen were made or 
received by the telephone numbers associated with Subject Device-1 or Subject Device-2, although 
in certain limited instances Cohen used a landline or other phone. 
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Sterling employees (“Sterling Employee-2” and “Sterling Employee-3”), I have learned, among 
other things, the following: 

a. Taxi medallions are small metal plaques affixed to taxis. Without a medallion, it 
is illegal to operate a taxi in cities with medallion systems, such as New York City. Cohen and his 

fox'MwiiM' 

wife own multiple LLCs that collectively own 32 taxi medallions (each LLC owns two 
medallions). 8 Cohen’s purchase of these New York taxi medallions was originally financed by 
loans from Capital One bank, for which the medallions served as collateral-Cohenwas not a taxi- 
operator, and leased his medallions to a third party. That third party made monthly payments to 
Cohen, who in turn used some of those proceeds to make his monthly loan payments to Capital 
One. 

b. In early 2014, Cohen became a customer of Sterling when he sought to refinance a 
mortgage on a rental property that he owned. In or around April 2014, Cohen raised with Steiling 
the prospect of refinancing his taxi medallion loans, which were then at Capital One. By in or about 
September 2014, Cohen began negotiating a lending transaction with Sterling that would allow 
Cohen to pay off his loans at Capital One and borrow more money from the then-increase in value 
of the medallions. According to Sterling Employee-1, in 2014, prior to the recent upheaval in the 
taxi industry—as a result of the emergence of ride-sharing services, such as Uber—taxi medallion 
loans were viewed by banks and investors as safe, short term credits, as the market value of taxi 
medallions was consistently rising. Consequently, taxi medallion loans—like the loans held by 
Cohen—were frequently refinanced at increasing amounts as the value of the medallions rose. 
According to Sterling Employee-1, borrowers typically cashed out the increase in the loan amount 


8 One of these companies. Mad Dog Cab Corp., was jointly owned by Sondra Cohen, who I 
believe is Cohen’s mother. 
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and used the additional funds for other purposes. Cohen appeal’s to have followed this approach in 
2014, when he agreed to refinance his medallion loans for approximately $22 million, which— 
according to letters from Capital One in Sterling’s files—was greater than his previous debt at 
Capital One Bank ($21 million, of which $ 14.6 million was a line of credit to Cohen). This allowed 
Cohen to cash out the proceeds from the transaction, 

c. Based on my review of records maintained by Sterling, I have learned that on or 
-about December 8,2014, each of Cohen’s sixteen taxi medallion-LLCs entered into loan-agreements 

and promissory notes with Sterling for the principal sum of $1,375,000, with repayment due on 
December 8, 2016. Each loan was signed by Michael or Laura Cohen, depending on who was the 
sole shareholder of the LLC. The address listed for each of the LLCs was the address for Subject 
Premises-1. Hie loans were also each secured by a security agreement, dated the same day, making 
the medallions collateral for the notes. To give Sterling additional security, Michael and Laura 
Cohen signed personal guarantees and confessions of judgment, giving Sterling the right to pursue 
collection against the Cohens’ personal assets were their corporations to default under the loan 
agreements. The personal guaranty agreements stated that the LLCs had offices at the address for 
Subject Premises-1, and contained a notice provision that stated that any notices required by the 
agreements should be mailed to Subject Premises-1. In total. Sterling agreed to lend approximately 
$22 million to the Cohens’ companies. 

d. Pursuant to participation agr eements. Sterling transferred 45 percent of Cohen’s 
taxi medallion debt to Melrose. 1 ' 


9 Melrose, which had a business principally focused on taxi medallion loans, is now in 
conservatorship by the National Credit Union Administration (“NCUA”). 
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e. In evaluating Cohen’s requested refinancing of the taxi medallions, Sterling (and 
Melrose, consistent with its participation in the deal) conducted due diligence. At Sterling s 
request, Cohen provided Sterling with a statement of financial condition, dated August 1, 2014 
(the “August 2014 Financial Statement”), which indicated that Cohen had $100,740,000 in total 
assets, $23,550,000 in total liabilities, and a net worth of $77,190,000." J From my review of a 
Sterling credit memorandum, dated September 29, 2014, I know that Sterling viewed the 
transaction favorably because, accounting for loan payments, cash flows from the medallions were - 
projected to be positive, the value of the collateral (as estimated by Sterling) exceeded $42 million, 
and the net worth of Cohen—who was the direct obligor under the guarantee agreements—was 
over $77 million. An internal Sterling credit and risk rating analysis report, dated October 20, 
2014, recommended approval of the loans for substantially the same reasons. 

f. Based on my review of records maintained by Sterling and public sources, I have 
learned that over time, the collateral backing Cohen’s loans (taxi medallions) lessened in value due 
to the rise in ride-sharing companies. Additionally, Cohen began falling behind on loan payments 
to Sterling and Melrose. I know from records maintained by Sterling and an interview with Sterling 
Employee-2 that, beginning in or around September 2015, Cohen told Sterling, in sum and 
substance, that the individual leasing Cohen’s medallions had fallen behind in making payments to 
Cohen, and that as a result, the monthly cash flow from his taxi medallions had been reduced, 
leaving him with a shortfall of approximately $16,000 each month. For instance, I have reviewed 
an email from Sterling Employee-2, dated September 9, 2015, summarizing a call with Cohen— 
which according to the email and toll records for Cohen’s cellphone occurred on September 8, 

10 Cohen subsequently provided Sterling with a revised statement of financial condition, also 
dated August 1,2014, which reported assets of $99,420,000, total liabilities of $23,550,000, and a 
net worth of $75,870,000. 
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2015_during which Cohen told Sterling Employee-2, in sum and substance, about his cash flow 

problems and a monthly shortfall of approximately $16,000. In feat same email, Sterling 
Einployee-2 commented that despite Cohen’s statements, his personal financial information 
“indicate^] a strong ability to make up the difference in payments.” Cohen, however, according 
to Sterling Employee-2, pushed the bank for a reduction in Cohen’s monthly payments. 

g. From my review of records maintained by Sterling and my participation in an 
" Interview "with Sterling Employee-2rf have learned-that Cohen and Sterling-Employee-2 spoke 
again on September 28, 2015, and that during the call Cohen stated, in sum and substance, that the 
individual to whom Cohen leases the medallions had again reduced monthly payments to Cohen. 1 
know fi-om my review of records maintained by Sterling that between in or about September 2015 
and November 2015, Sterling raised the possibility—both internally and wife Cohen—of Cohen 
posting his real estate holdings, personal residence, or some other collateral as additional security 
for the banks.' 1 According to these records, however, Cohen resisted these requests. From my 
review of loan documents and records maintained by Sterling, I know that m or about November 
2015, as a result of Cohen’s representation that he was not earning sufficient returns on his 
medallions to cover monthly interest payments. Sterling and Melrose agreed to amend their loans 
wife Cohen by, among other things, reducing the interest rate Cohen paid to Melrose and extendmg 

fee loan maturity date to December 8,2017. 

h. I know from interviews with Sterling Employee-1 and Sterling Employee-2, as well 

as emails 1 have reviewed, that in or about October 2016, Cohen told Sterling Employee-1 that 
Cohen had a potential buyer of his taxi medallions, named who would agree to 

” Based on my review of property records, I know that on or about October 28, 2015, aiound 
the time period when Sterling raised the possibility of Cohen posting his personal resiclence- 
Subject Premises-1—as collateral, Cohen transferred Subject Premises-1 into a trust. 
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assume Cohen’s debt with Sterling and Melrose. Based on my review of records maintained by 
Sterling, as well as the interviews with Sterling Employee-1 and Sterling Eraployee-2 referenced 
above, I know that by or before October 2016, Cohen had entered into negotiations to sell his sixteen 
corporate taxi medallion entities | 

for the balance of the loans, which at the time was $21,376,000. 1 know from my review of records 


maintained by Sterling, and my participation in an interview with Sterling Employee-2, that as a 


condition of the transfer of the medallion loans—and because Sterling was unfamiliar with 



II —Sterling requested that Cohen make a substantial principal payment on the loan, of 
approximately one million dollars, prior to the transfer. Cohen rejected this request initially. But 
on or about January 31,2017, Cohen told Sterling Employee-1, in sum and substance, that he would 
make a one million dollar principal reduction payment in order to move forward with the medallion 
transfer deal with Indeed, in an email sent by Cohen to Sterling Employee-2 on or 

about February 22, 2017, Cohen confirmed that he “agreed to pay down I million from the loan 


amount” 

i. Pursuant to the participation agreements between Sterling and Melrose, Sterling 

was required to secure Melrose’s agreement to participate in the transfer of the taxi medallion debt 
from Cohen to On or about April 17, 2017, Sterling sent a memorandum to 

Melrose summarizing the terms of the proposed transaction, and noting the requirement that 
Melrose agree to the terms. On or about May 2,2017, Sterling Employee-1 told 

that Melrose had agreed to the deal in principle, and that Sterling would be sending the parties a 
term sheet shortly. 

j. In order for the banks to conduct diligence and evaluate the proposed transaction 
fully, they requested financial information from the parties. On or about June 7, 2017, Steiling 
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Employee-1 emailed Cohen to request an “updated personal financial statement,” completed 
jointly with Cohen’s wife, and Cohen’s most recent federal income tax return. On or about June 
8,2017, Cohen emailed Sterling Employee-1 a Sterling personal financial statement form that had 
been filled out by hand, which referenced a statement of financial condition, dated May 1, 2017 
(the “May 2017 Financial Statement”) that was also attached. The May 2017 Financial Statement 
included a cover letter from Cohen’s accountant, stating, in sum and substance, that 

the information in the statement came from Cohen and thal lad not-confirmed-its accuracy 

or completeness. The May 2017 Financial Statement stated that Cohen had total assets of 
$41,955,000, total liabilities of $39,130,000, and a net worth of $2,825,000. The May 2017 
Financial Statement indicated that Cohen’s assets were comprised of $1,250,000 in cash, 
$26,155,000 in closely held companies (such as the taxi medallion entities and his real estate 
holdings), $3,200,000 in real estate investments, and his $11,000,000 personal residence. 12 

k. Based on my review of reports of law enforcement interviews of Sterling 
Employee-1,1 have learned that Sterling Employee-1 reviewed the May 2017 Financial Statement 
with Cohen to, among other things, verify its accuracy, and Sterling Employee-1 asked Cohen about 


specific line items on the financial statement, including the cash amount, value of medallions, and 
total liabilities. Cohen stated to Sterling Employee-1, in sum and substance, that the May 2017 
Financial Statement was accurate. 

1. On or about August 16, 2017, Sterling Employee-1 emailed Cohen and /| 


|, attaching a non-binding term sheet memorializing the potential transaction between 


12 Based on my review of Cohen’s financial statements, I know that the precipitous decline in 
assets from his 2014 financial statement to his 2017 financial statements can be explained 
primarily by reported depreciation in the value of Cohen s real estate assets and medallion 
investments. 
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Sterling, Melrose, Cohen, and The tenn sheet included a cover letter addressed 

to Cohen at Subject Premises-1. The parties negotiated the provisions of the term sheet and, on or 
about September 5, 2017, Sterling Eraployee-1 sent md Cohen a copy of the 

executed term sheet. According to the term sheet, would borrow $20,000,000 

from Sterling and Mehose, to be secured by the medallions that vas to acquire from 

Cohen. 

m. 'As part of the agreement, accordingto the term sheet, $ 1,265,913 in principal (which 
is what would remain after the $20,000,000 payment on the outstanding loan balance) would be 
repaid by Cohen and the two banks, with Cohen paying fifty percent and the banks dividing the 
remaining half of the balance. Based on my review of an internal Sterling credit memorandum, 
dated October 4,2017, the parties reached a preliminary agreement that Cohen would pay $632,956 
of the remaining $1,265,912 principal loan balance, and Sterling and Melrose would absorb 
$357,167 and $275,789, respectively, in the form of charge-offs. According to Sterling Employee- 
1, Sterling was willing to divide the repayment of the outstanding principal balance—despite its 
prior insistence that Cohen make a principal pay-down of at least one million dollars—because 
Cohen represented on a telephone call with Sterling Employee-1, in sum and substance, that he had 
insufficient liquidity to pay the full outstanding principal balance. As part of the agreement, Sterling 
and Melrose also agreed to relieve Cohen and his wife of the personal guarantees that they made 
on behalf of the LLCs. Thus, after completing the jj^J^Htransaction, Cohen would no longei 

have had any outstanding obligations to Sterling or Mehose. 

n. Based on my review of emails sent by Sterling employees, I have learned that 
because the transaction between the parties was subject to full credit underwriting by Sterling and 
Mehose (as well as Melrose’s regulators at NCUA), in August and September 2017, Sterling 
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required and requested additional financial statements and tax returns for Cohen and 
for its credit underwriting process. In response to Sterling’s requests, on or about Septembei 25, 
2017, Cohen emailed Sterling Employee-2 a copy of his 2016 tax return. The tax return listed 



Cohen’s mailing address as Subject Premises-1. Additionally, on or about October 5, 2017, Cohen 
re-sent Sterling Employee-2 a copy of his May 2017 Financial Statement. A day later, on October 


6, 2017, Cohen emailed Sterling Employee-2 a statement of financial condition, dated September 
30, 2017"(the “September2017 Financial Statement-)? - 

o. Like the May 2017 Financial Statement, the September 2017 Financial Statement 
included a cover letter from ^jj, Cohen’s accountant, stating, in sum and substance, that 

the information in the statement came from Cohen, and that lad not confirmed its accuracy 

or completeness. The September 2017 Financial Statement stated that Cohen had total assets of 
$33,430,000, total liabilities of $45,630,000, and a negative net worth of $12,200,000. |j Notably, 
unlike Cohen’s May 2017 Financial Statement, the September 2017 Financial Statement 
represented to Sterling that Cohen had a negative net worth. The September 2017 Financial 
Statement indicated that Cohen’s assets were comprised of $1,250,000 in cash, $17,630,000 in 
closely held companies (including the taxi medallion entities and his real estate holdings), 14 
$3,200,000 in real estate investments, and his $ 11,000,000 personal residence (which, for the first 


13 Based on my review of Cohen’s financial statements, 1 know that this further decline in 
assets can be explained primarily by reported depreciation in the value of Cohen’s real estate assets 
and medallion investments. 

14 Notably, the September 2017 Financial Statement valued each of Cohen’s thirty-two New 

York taxi medallions at approximately $180,187.50, which ^lsiderably less than the 
$650,000 valuation ascribed to each medallion in the Cohen- term sheet. 
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time, he indicated was held by a trust). 15 The September 2017 Financial Statement included assets 
and liabilities not held in Cohen’s name, such as various entities associated with his taxi medallions 
and some of his real estate investment entities. 

p. From my participation in an interview with Sterling Employee-2, and my review of 
records maintained by Sterling, 1 have also learned that around the time Cohen piovided Steiling 
with these financial statements—i.e., in or around September 2017 Cohen stopped paying 
monthly loan payments on his taxi medallion loans altogether. According to Sterling Employee- 
2, Cohen informed Sterling, in sum and substance, that he had insufficient funds to pay the monthly 
principal and interest payments on his medallion loans. By in or about Decembei 2017, Steiling 
and Melrose had not been paid approximately $276,937.92 in monthly principal and interest 
payments on the medallion loans. Based on Cohen's financial condition as conveyed in the 
September 2017 Financial Statement, and his delinquency in making payments to Sterling, among 
other things, the bank’s credit underwriting committee determined (and memorialized in a 
December 2017 memorandum) that the Cohen-’^^^| transaction was favorable for the bank 
- that is, that^^^^^l would be a better borrower than Cohen. 

q. On or about December 26, 2017, Sterling sent Cohen a demand letter requesting 
the immediate receipt of past-due loan payments. The demand letter was addressed to Cohen at 
Subject Premises-1. On December 29, 2017, Sterling sent Cohen a letter stating that he was in 
default under the loans between Sterling and Cohen’s medallion corporations. The notice of 
default was addressed to Cohen at Subject Premises-1. Cohen did not make an immediate payment 
on the loans, but instead sent an e-mail to Sterling Employee-1 on or about January 24, 2018, 

15 Based on my review of property records maintained by the City of New York, and my 
participation in an interview withl J f know that in 2015, Cohen transferred his residence to 
a trust. He did not disclose that transaction to or Sterling until in or about September 2017. 
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stating that during the closing of the Cohen-^^^^^^^| transaction, Cohen would “bring all 
payments up to date as well as deposit the payoff differential.” Cohen also requested by email on 
January 24, 2018, that at die closing of the Cohen- transaction, Sterling provide a letter 

stating that all of Cohen’s debts have been satisfied and that Cohen’s personal guarantees of the 
medallion loans had been terminated. 

r. The Cohen- transaction, however, did not close. On or about January 

29, 2018. the ' attorney emailed attorneys for Sterling and stated that “at this time 

there is no deal with Michael Cohen. Some of the numbers have changed and we are not prepared 
to go forward.” 

s. Based on my participation in the interview with Sterling Employee-2 and my 

review of records maintained by Sterling, 1 know that after the Cohen- ieal fell apart, 

Sterling assigned Cohen’s loans to Sterling Employee-3, who specializes in collecting on 
defaulting loans. From my participation in an interview with Sterling Employee-3, my review of 
telephone call notes taken by Sterling Employee-3, and my review of telephone records, T know 
that Sterling Employee-3 spoke several times to Cohen on or about January 30, 2018 about paying 
down and/or restructuring Cohen’s outstanding taxi medallion loans. On the calls, which in total 
lasted more than an hour, Cohen stated in sum and substance that he did not have more than 
$1,250,000 to pay toward the medallion loans. On the call, in the course of reviewing the failed 
Cohen- transaction. Sterling Employee-3 questioned Cohen about the price 

|vas to have paid for each medallion, and whether there was a side agreement between 
Cohen and j^. Cohen denied that there was any side agreement with 

t. On or about January 31, 2018, Cohen emailed Sterling Employee-3 and proposed 
paying $500,000 to bring the loans current and $750,000 to bring the principal balance to 
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$20,500,000. Cohen also suggested revised monthly interest payment amounts. The signature 
block on the email indicated that Cohen’s address was the address for Subject Premises-2. On oi 
about January 31, 2018, Sterling Employee-3 responded to Cohen and stated, in sum and 
substance, that Cohen would need to pay the entirety of the overdue payments and pay down the 
principal balance of the loan to $20,000,000 (in total, a payment of approximately $1,750,000), 
and would need to make larger monthly interest payments. 

u. On or about February 1,2018, Cohen emailed Sterling Employee-3 and proposed 
“[pjayment of $1.250m which ALL can be used to pay down principal, if [Sterling] will waive 
past due amounts,” but stated “I do NOT have more than the $ 1.250m.” (Emphasis in original.) 
Cohen also stated, in sum and substance, that he had insufficient financial resources to post 
additional collateral or pre-fund monthly payments. The signature block on the email indicated 
that Cohen’s address was the address for Subject Premises-2. Based on my participation in an 
interview with Sterling Employee-3, 1 have learned that since January 30, 2018, Sterling has 
continued to renegotiate the medallion loans with Cohen based on Cohen’s representations about 
]iis current financial position. In particular, according to Sterling Employee-3, Cohen and Sterling 
have an agreement in principal to restructure Cohen’s loans based in part of Cohen s agieement to 
make a principal payment of approximately $750,000, to make a payment of $500,000 to become 
current on interest payments, and to post $192,000 in cash collateral foi his futuie monthly 
payments on the loan. Cohen also agreed to pledge an interest he had in a property. Sterling 
Employee-3 has stated that had Cohen indicated he had more than $1,250,000 available to him, 
Sterling would have, among other things, negotiated for a larger reduction to the principal amount 
of the loan. 
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(ii) Cohen Made Material Misrepresentations About His Finances to Banks 

Cohen Concealed from Sterling and Melrose Cash Derived from Consulting Work 

17. As set forth in detail below, despite multiple written and oral representations by 
Cohen to Sterling (and, by extension, Melrose 16 ) that he had insufficient funds to pay down the 
principal balance of the medallion loans, make monthly interest payments, or pay past-due 
amounts, it appears that between 2016 and the present, Cohen opened and maintained bank 
accounts at First Republic Bank (“First Republic”),- and then received-millions of dollars, in 
consulting payments in these accounts, which he did not disclose to Sterling. Cohen set up these 
accounts and received these funds during the very period in which he made disclosures to Sterling 
about his personal finances (including his assets and liabilities) and his ability to make payments 
on the medallion loans. In these disclosures to Sterling—and despite being asked about these bank 
accounts by his accountant-—-Cohen misled the bank by claiming he had insufficient liquidity to 
satisfy his obligations or meet the bank’s demands, while withholding information about these 
ongoing revenue streams and liquid financial assets at First Republic. 

18. Specifically, based on my review of documents and bank records produced 
pursuant to a subpoena by First Republic, and my participation in and review of reports of 
interviews with a First Republic sales manager (“First Republic Employee-1 ”) and a First Republic 
senior managing director (“First Republic Empioyee-2”), I have learned, among other tilings, the 
following: 


16 Based on my review of a report of an interview conducted with an employee of Melrose, I 
have learned that, pursuant to the participation agreement between Sterling and Melrose, Cohen’s 
financial statements and other records in Sterling’s possession were forwarded to Melros^othat 
Melrose could make a determination as to whether to approve of the Cohen- | 
transaction. Based on my review of reports of interviews with Melros^mployees, 1 also Know 
that Cohen called employees at Melrose regarding the Cohen-^^^^^jj.ransaction. 
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a. Cohen and his wife have been customers of First Republic since approximately 
June 2011. Cohen controls several checking and loan accounts at First Republic, some in his own 
name and others in the names of corporate entities. According to First Republic s know-yout- 
customer records on Cohen, 17 his primary physical address is the address for Subject Premises-!. 

b. On or about October 26, 2016, in Manhattan, New York, Cohen opened a new 
checking account at First Republic in the name of Essential Consultants LLC (the Essential 
Consultants Account”). Coheh was the only authorized signatory on the account. According to 
account opening documents, the primary address for Essential Consultants LLC was the address 
for Subject Premises-1. When Cohen opened the Essential Consultants Account, First Republic 
Employee-1 conducted an in-person interview of Cohen. In response to a series of know-your- 
customer questions about the purpose of the account—the answers to which First Republic 
Employee-1 entered into a form 18 —Cohen stated, in sum and substance, that he was opening 
Essential Consultants as a real estate consulting company to collect fees for investment consulting 
work, and all of his consulting clients would be domestic individuals based in the United States. 
Cohen also stated, in sum and substance, that his purpose in setting up the account was to keep the 
revenue from his consulting business—which he said was not his main source of income—separate 
from his personal finances. As set forth below, there is probable cause to believe that Cohen’s 
statements about the intended purpose of the account and source of funds for the account were 
false. Specifically, as described below, the account was not intended to receive and does not 


17 Certain financial institutions are required to conduct such procedures pursuant to the Bank 
Secrecy Act and its implementing regulations. See 31 U.S.C. § 5318; 31 C.F.R. § 1020.220. 

18 First Republic Employee-1 fu st filled out the form on the day he interviewed Cohen, October 
26, 2016. On or about December 19, 2016, at the request of bank compliance personnel, Fiist 
Republic Employee-1 updated the form to add more detail about Cohen’s statements. 
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appear to have received—money in connection with real estate consulting wotk, in addition, the 
account has received substantial payments from foreign sources. 

c. I know from my review of First Republic bank records that were scheduled by an 
FBI forensic accountant that after Cohen opened the Essential Consultants Account, Cohen 
received payments into that account from foreign businesses and entities that do not reflect the 
stated client profile for the residential and commercial real-estate consulting services. Specifically, 

frornmy review of the Essential Consultants-Account schedule and-publio-sources, 1 know the- 

following: 

i. Beginning on or about January 31, 2017, Cohen began receiving monthly 
payments of $83,333 into the Essential Consultants Account fr om an entity called Columbus Nova 
LLC. According to public sources, Columbus Nova is an investment management firm controlled 
by Renova Group, an industrial holding company based in Zurich, Switzerland that is controlled 
by Russian national Viktor Vekselberg. From January 2017 to August 2017, the Essential 
Consultants Account received seven payments totaling $583,332.98 from Columbus Nova LLC. 

ii. Beginning on or about April 5, 2017, the Essential Consultants Account 
began receiving payments from Novartis Investments, SARL, which 1 believe to be the in-house 
financial subsidiary of the Swiss pharmaceutical company Novartis International AG (“Novartis”). 
Between April 2017 and February 2018, the Essential Consultants Account received eleven wire 
payments from a Swiss bank account held in the name of Novartis, each in the amount of $99,980, 
for a total of $1,099,780. 

iii. Beginning in or about April 2017, the Essential Consultants Account started 
receiving wire payments from a bank account associated with the telecommunications company 
AT&T Inc. (“AT&T’). Specifically, on or about April 14, 2017, AT&T sent $100,000 to the 
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Essential Consultants Account and, from in or about June 2017 to in or about January 2018, the 
Essential Consultants Account received ten $50,000 payments from AT&T. In total, AT& f sent 

$600,000 to die Essential Consultants Account. 

iv. On or about May 10, 2017, June 9,2017, July 10, 2017, and November 27, 
2017, the Essential Consultants Account received four deposits in the amount $150,000 (totaling 
$600,000) from a bank account in South Korea. The account holder from which the money was 
sent is Korea Aerospace Industfies-Ltd. (“KAI”). KAI is a South Korea-based company that 
produces and sells fixed-wing aircraft, helicopter aircraft, and satellites to the United States 

Department of Defense, among other customers. 

v. On or about May 22, 2017, the Essential Consultants Account received a 
$150,000 deposit from an account at Kazkommertsbank, a Kazakhstani bank. The listed account 
holder at Kazkommertsbank was a second Kazakhstani bank named BTA Bank, AO. A message 
accompanying the wire payment indicated that the payment was a “monthly consulting tee as per 
Inv BTA-101 DD May 10, 2017 consulting agreement W/N DD 08 05 2017 CNTR W/NDD 
08/05/2017.” 

vi. In total, from on or about January 31,2017 to on or about February 1,2018, 
die Essential Consultants Account received approximately $3,033,112.98 in transfers and checks 
from the aforementioned entities. As of on or about January 10, 2018, the balance in the Essential 
Consultants Account was $1,369,474.23. Cohen’s withdrawals from the Essential Consultants 
account reveal that it was used for largely personal purposes, including to pay, among other things, 
American Express bills and fees from “die Core Club,” a private social club in New York. 

d. On or about April 4, 2017, Cohen opened another new checking account at First 
Republic, this one in the name of Michael D. Cohen & Associates, P.C. (the “MDC&A Account”). 
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Cohen was the only authorized signatory on the account. According to account opening 
documents, the primary address for MDC&A Account was the address tor Subject Premises-1. 
Among other things, the MDC&A Account received ten wire transfers and one check from an 
account in the name of Squire Patton Boggs, a law firm. As noted above, Subject Premises-2 is 
located inside the New York office of Squire Patton Boggs. In total, from on or about April 5, 
2017, to on or about January 2,2018, the MDC&A Account received $426,097.70 in deposits, and 
the balance in the-account as of January-2r2018, was $344;541.-35.- As discussed below,-Gohen 
never disclosed any of the balance in the Essential Consultants or MDC&A accounts to Steiling 
during the negotiations with respect to the transaction or the subsequent loan 

refinancing negotiations, including in his May 2017 Financial Statement and Septembei 2017 
Financial Statement. 

19. Based on my review of emails that were seized pursuant to the Cohen Email 
Warrants, and my review of reports of interviews with employees of AT&T and Novartis, it 
appears that the aforementioned payments to the Essential Consultants Account and MDC&A 
Account were for political consulting work, including consulting tor international clients on issues 
pending before the Tramp administration. Specifically, from ray review of emails from the Cohen 
Gmail Account, the Cohen MDCPC Account, and public sources, I have learned the following: 

a. On or about April 28, 2017, Cohen sent an email to an individual whom I believe 
is affiliated with KA1. In the email, Cohen attached a “Consulting Agreement” between KAI and 
Essential Consultants dated as of about May 1, 2017. The agreement indicates that Essential 
Consultants had the address of Subject Premises-2. The document indicates that Essential 
Consultants would render “consulting and advisory services, as requested” by KAI, and that KAI 
would pay Essential Consultants “a consulting fee of One Million Two Hundred Thousand 
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($1,200,000.00) US Dollars,” disbursed through eight $150,000 installments between May 2017 
and December 2017. I have also reviewed invoices in amounts of $150,000 that Cohen emailed 
to an individual whom I believe is affiliated with KAI. At the top of the invoices the address listed 

for Essential Consultants is the address for Subject Premises-2. 

b. On or about May 8, 2017, Cohen sent an email to an individual whom 1 believe is 

affiliated with BTA Bank. The signature block on Cohen’s email listed “Essential Consultants 

LLC” and “Michael D. Cbheir& A sso-ciates, PC” and provided the address for- Subject Premises- 

2. In the email, Cohen attached a document purporting to be a “Consulting Agreement ’ between 

BTA Bank and Essential Consultants dated as of about May 8,2017. The agreement indicates that | 

Essential Consultants had the address of Subject Premises-2. The document indicates that 

Essential Consultants would render “consulting and advisory services” to BTA Bank, and that 

BTA Bank would pay Essential Consultants “a consulting fee of One Million Eight Hundred 

Thousand ($1,800,000.00) US Dollars,” disbursed through monthly payments of $150,000. On or 

about May 10,2017, Cohen sent an email to an employee of BTA Bank, and attached to the email 

an invoice to BTA Bank in the name of Essential Consultants, with the address of Subject Premises- 

2. The invoice contemplated a $150,000 payment to Essential Consultants for a “monthly 

consulting fee.” 

c. On or about January 23, 2017, Cohen appears to have entered into a consulting 
agreement with AT&T, which contemplates that Essential Consultants “shall render consulting and 
advisory services to [AT&T]” and that AT&T would “advise [Essential Consultants] of those issues 
and matters with respect to which AT&T Services desires [Essential Consultants]^ assistance and 
advice.” The agreement indicates that Essential Consultants had the address of Subject Premises- 
1. The contract calls for AT&T “to pay the Consultant for his services ... a consulting fee of Fifty | 
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Thousand ($50,000) Dollars ... per month” Based on my review of reports of interviews with 
AT&T employees, I have learned that AT&T retained Cohen to consult on political issues, 
including net neutrality, the merger between AT&T and Time Warner, and tax reform. 

d. On or about March 1, 2017, Cohen appears to have entered into a contract between 
Novartis and Essential Consultants, which provides that Essential Consultants will "provide 
consulting and advisory services to Novartis on matters that relate to the repeal and replacement of 
the Affordable Care Act in the' USlffiTanr other issues mutually-agreeable to [Essential 
Consultants] and Novartis.” The contract provides for a “consulting fee of One Million Two 
Hundred Thousand ($1,200,000) US dollarsto be paid to Essential Consultants in equal monthly 
installments over the course of a year. Based on my review of reports of interviews with Novartis 
employees, I have learned that Novartis retained Cohen to provide political consulting services and 

to gain access to relevant policymakers in the Trump Administration. 

e. In or about February 2017, Cohen began negotiating the terms of a “strategic 
alliance” with Squire Patton Boggs. On or about March 4, 2017, Squire Patton Boggs emailed 
Cohen a “strategic alliance agreement.” Under the terms of the agreement, Cohen agreed to 
generate business for the law firm, and Squire Patton Boggs agreed to pay to Cohen “an annual 
strategic alliance fee of $500,000, payable in twelve (12) equal moodily installments.” Squire 
Patton Boggs also agreed to provide Cohen with “dedicated and segregated office space in [Squire 
Patton Boggs’s] New York and Washington D.C. offices, which office space shall be physically 
separate from [Squire Patton Boggs’s] offices and have locked doors and its own locked file 
cabinets.” On or about April 3, 2017, Squire Patton Boggs announced on its website that is had 
formed a “strategic alliance” with Michael D. Cohen & Associates and would “jointly represent 

clients.” 
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20. Despite the significant amount of money that Cohen received into the Essential 
Consultants Account and the MDC&A Account, and the cash balance in both accounts, Cohen did 
not disclose that information to Sterling or Melrose. Specifically, based on my review of documents 
provided by |T ] (as noted above, Cohen’s accountant at the time), my participation in an 
with and my and 1 

have learned the following: 

aT In or about May 2017, met- with Cohen at Subject Premises-2-At the- 

meeting, Cohen told in sum and substance, that he had set up a law practice called Michael 

D. Cohen & Associates P.C., and a consulting company called Essential Consultants LLC. Cohen 
told in sum and substance, that he expected to earn $75,000 per month in connection with 

his law practice, and that he expected gross revenues for the consulting business to be between live 
and six million dollars annually. 

b. In or about October 2017, if not earlier, ^^H vas prepays a P ersonal financial 
statement for Cohen. On or about October 6,2017, ^ sent an email to Cohen in which <| 
wrote that “[attached is a draft of the new PFS as of September 30, 2017” and attached a draft of 
the September 2017 Financial Statement. The draft statement reflected that as of September 30, 
2017, Cohen had only $1,250,000 in cash, total assets of approximately $33,430,000 (comprised of 
taxi medallion interests, real estate interests, and his personal residence and property), and liabilities 
of approximately $45,630,000, leaving him purportedly over $12 million in debt. In the same email, 
Questioned Cohen, in sum and substance, about the fact that the financial statement did not 
list any value associated with either the Essential Consultants Account or the MDC&A Account: 
u [w]e did not add any value for you[r] two operating entities - Michael D. Cohen & Associates 
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POC [sic] and Essential Consultants LLC. Please advise whether or not these should be disclosed 


and what value.” 

c. On or about October 6,2017, Cohen called 
on toll records for Cohen’s cellphone—and told 


\yy telephone—which is reflected 
in sum and substance, not to include 
Essential Consultants or MDC&A in the September 2017 Financial Statement because they had no 
value. On or about October 6, 2017, following the call with Cohen, using the Cohen 

Account; responded’to I email with the answer “fflooks good to me,” Cohen never-directed 


to make any changes to his cash position as listed in the September 2017 Financial 
Statement. In a letter dated October 6, 2017, addressed to Cohen stated, “I have reviewed 

the attached statement of financial condition and find it to be correct and consistent with the 
representations that I made to your firm. The attached is an accurate reflection of my assets, 
liabilities and net worth (deficit) as of September 30, 2017.” Attached to thaJ.Jeter was the 
September 2017 Financial Statement, which, as noted above, was then transmitted to Sterling in 
connection with the proposed taxi medallion transaction between Sterlmg, Cohen, and 1 

21. Based on my review of a report of an interview with Sterling Employee-l, I have 
learned that Cohen did not disclose his income stream from Essential Consultants to Sterling 
Employee-1 or, to his knowledge, anyone else at Sterling. According to Sterling Employee-1, 
knowledge of such an income stream would have affected Sterling’s demands durmg the 
negotiations, particularly with respect to the amount of a principal paydown of Cohen’s debt. 


rnhen 1 Inrlerstated His Available Cash 

22. In addition to withholding the existence of his Essential Consultants income from 
Sterling and Melrose, it appears that Cohen also substantially understated his available cash and 
cash equivalents in his financial disclosures. Specifically, I know from my review of tire September 
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2017 Financial Statement that Cohen provided to Sterling that Cohen represented that he had 
$1,250,000 in cash as of September 30, 2017. 1 also know that on or about January 30. 2018, in a 
telephone call with Sterling Employee-3, and on February 1, 2018, in an email to Sterling 
Employee-3, Cohen represented that he did not have more than $1,250,000 in cash. But, from my 
review of a summary of bank records that were scheduled by forensic accountants, 1 have learned 
that Cohen had approximately $5,000,000 in cash and cash equivalents as of September 30,2017. 
Additionally, as of FebruaryH, 2018, Cohen had approximately $6,000,000 in-cash and cash 
equivalents. Specifically, from my review of the account schedule and bank records, I have learned 

the following: 

a. Cohen has three checking and/or savings accounts at Capital One Bank, one of 
which is in his wife’s name. As of September 30, 2017, Cohen had $1,105,680.35 in his savings 
account, and $1,262,982.29 in total in the three accounts at Capital One Bank. As ot February 1, 

2018, Cohen had a total of $1,389,245.78 in these accounts. 

b. Cohen has three accounts at Morgan Stanley in his name. As of September 30, 
2017, the combined total in cash and cash equivalents in those three accounts was $1,270,600.41. 

As of February 1,2018, Cohen had $1,284,996.13 in these accounts. 

c. As of September 30,2017, Cohen had $260,689.18 in an account at Signature Bank. 

As of February 1,2018, Cohen had $261,517.55 in this account. 

d. In addition to the Essential Consultants Account and MDC&A Account at First 
Republic, Cohen also had two joint checking accounts with Laura Cohen at First Republic. In total, 
as of September 30, 2017, Cohen had at least $1,876,209.27 in total in his four accounts at First 
Republic. As of February 1,2018, Cohen had $3,332,992.95 in these accounts. 
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e. Cohen has an account at Bethpage Credit Union with $25,931.39 in it as of 
September 30,2017. 

f. As of September 30, 2017, Cohen had $17,542.54 in accounts at Sterling. 

g. Cohen has two accounts at TD Bank—one in his name and one held jointly with his 
wife. Cohen also has a safety deposit box at TD Bank—Subject Premises-3. The safety deposit 
box was opened on December 13, 2017 in the names of Michael and Laura Cohen. 

h—In total; as of September 30,-201-7 7 Cohen had at least $4,713,935.08 in his accounts 
at Capital One Bank, City National Bank, Signature Bank, Sterling Bank, Bethpage Credit Union, 
First Republic, and Morgan Stanley. As of February 1, 2018, Cohen had $6,268,732.59 in his 
accounts at Capital One Bank, City National Bank, Signature Bank, First Republic, and Morgan 
Stanley. 19 

23. Accordingly, based on the foregoing, it appears that Cohen’s written and oral 
representations to Sterling and Melrose that he did not have more than $1,250,000 were false, and 
that Cohen withheld information regarding approximately $5 million in funds from Sterling and 
Melrose in order to secure favorable terms in his renegotiation of his medallion loan. Based on 
my participation in an interview with Sterling Employee-2, and my review of reports of interviews 
with Sterling Employee-1 and two Melrose employees, it is my understanding that that Sterling 
and Melrose would view Cohen’s understating of his assets as material to its decision whether to 
renegotiate Cohen’s medallion loans and on what terms, or to its decision whether approve of the 
transfer of those loans to | 

19 Based on my review of the account schedules described above, I know that, as of the date of this 
affidavit, the account balances for TD Bank have not yet been included in the schedule for either 
date and the account balances for Sterling National Bank and Bethpage Credit Union have not yet 
been included in the schedule for February 1, 2018. Tlius, to the extent that these accounts have 
positive balances, Cohen’s total balances in fact were even higher on these dates. 
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Cohen Has Unreported Interest Income 

24. It appears that Cohen also hid from Sterling interest income that he was receiving in 
connection with a six million dollar loan he made to another individual. Specifically, I know from 
my review of the May 2017 Financial Statement and September 2017 Financial Statement that 
Cohen provided to Sterling that Cohen did not disclose that he had made a note receivable in the 
amount of approximately $6 million, or that he was earning approximately $60,000 per month in 
interest income in connection with that loan. But,-from-my review of a summary of bank records 
that were reviewed by another law enforcement agent, my review of property records and 
documents obtained pursuant to the Cohen Email Warrants, and my participation in an interview 
with have learned the following: 

a. Based on ray review of property records, I have learned that on or about March 12, 
Cohen agreed to (end ^^^^|^^^^^^^^^Ppproxiraately 

$2,000,000. 20 It appears that the promissory note was unsecured by any real property. On or about 
April 28, 2014, Cohen and amended the promissory note, and restructured the loan to 

increase the principal amount to approximately $5,000,000. Under the terms of the amended 

promissory note, the loan was secured by | apartment in |_ _| Flonda ‘ 0n 

or about April 8, 2015, Cohen and |restated the promissory note to increase die principal 

amount to $6,000,000. 21 

b. Based on my review of a copy of the restated note, which was obtained pursuant to 
the Cohen Email Warrants, I have learned that under the terms of the amended and restated 


20 1 learned from Getzel diat 


21 The note states that the loan is to 
jointly and severally. For ease of reference, I refer simply to “ 

34 



husband and wife, 
lerein. 
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promissory note, Cohen’s loan to s an interest-only loan, and that the principal balance 

of the loan bears interest at an annua) rate of 12.25 percent. I also know that the amended and 
restated promissory note includes a schedule of payments that require to pay Cohen 

approximately $61,250 per month beginning in April 2015 and ending in April 2019. The note also 
requires thal^^^H epay the principal balance of $6,000,000 on April 28,2019. 

c. Based on my review of bank records, I have learned that, consistent with the terms 

of the amended and-restated promissory note T has made monthly payments of 

approximately $61,250 since April 2015. Specifically, based on my review of records maintained 
by Capital One Bank, I have learned that from April 2015 to October 2015, Cohen received checks 
from an entity totaling $61,250 per month, which he 

deposited into his personal bank account at Capital One Bank. 22 It appears from my review of bank 
records and public sources that the owner of 1 

From my review of records maintained by Capital One Bank, I have also learned that since October 
2015, Cohen has received checks from an entity called j totaling 

$61,250 per month, which he deposited into his personal bank account at Capital One Bank. It 
appears from my review of bank records and public sources that s also the owner of j\ 

In total, it appears that Cohen receives approximately $735,000 per year 
in interest payments from | 

d. Based on my review of Cohen’s May 2017 and September 2017 Financial 

Statements, my review of his 2015 and 2016 tax returns obtained via subpoena and fr om the Cohen 
Email Warrants, and my participation in an interview with I have learned that Cohen did 


22 In April 2015, Cohen received a pro-rated payment. For all months thereafter, the total payment 
equaled $61,250, but iften made the payment in multiple checks. 
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not disclose this interest income he was receiving from Sterling or Melrose, or list it 

on his tax returns. I have also learned that while this interest income is taxable, Cohen did not tell 


| -his accountant—about the income, and 
began doing 


lonly learned about the income because he 


|taxes in 2017. 2 ’ 

25. Accordingly, based on the foregoing, it appears that Cohen’s representations to 

Sterling and Melrose that he did not have mote than $1,250,000 were false, and that Cohen 

in order to 


withheld information relating To the-interest income he is receiving from 
secure favorable terms in his renegotiation of his medallion loan. 

Cohen Had a Side Agree ment With 1 

26. As set forth in detail below, during the course of Cohen’s negotiations to sell his 


interest in taxi medallions and the associated debt to 


Cohen not only 


misrepresented his financial position to Sterling, but also failed to disclose a side agreement he 


had negotiated with 


it appears that 


[greed to pay an above-market price 
I Approximately 


for Cohen’s taxi cab medallions, and in exchange, Cohen agreed to pay 
$3.8 million in cash. Specifically, from my review of documents produced pursuant to a subpoena 
by Sterling, and my participation in interviews with Sterling Employee-1, Sterling Employee-2, 
and Sterling Employee-3,1 have learned, among other tilings, the following: 

a. On or about September 5, 2017, an executed terra sheet was circulated by Sterling 

I The term sheet listed Cohen’s address as the address foi 


Employee-1 to Cohen and 

Subject Premises-1. According to the term sheet, 
from Sterling and Melrose, to be secured by the medallions that 


|vould borrow $20,000,000 
was to acquire from 


23 Accordingly, this interest income-which should have been reported as such on Cohen’s tax 
returns—is included herein in calculations of Cohen’s true cash position. 
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Cohen. At a price of $20 million for thirty-two taxi medallions, the proposed transaction valued 
each medallion as worth $625,000. The term sheet also contemplated a $1,265,913 pay-down of 
the principal balance of the loan. The term sheet made no mention of a $3.8 million payment from 
Cohen to ■Hill | or any other form of payment or financial transaction between the parties. 

b. Additionally, an internal Sterling credit memorandum, dated October 4, 2017, 
describing the terms of the Cohen- ^^^(transaction and the new loan to 

not mention^ny payments fi-bm Cohen tolBB includin § a ^-million payment.- The 
memorandum also noted that the “loan amount of $20MM indicates a $625M purchase price per 
medallion” but “it is recognized that this is not in line with current market values.” Indeed, 
according to an internal Sterling memorandum dated February 5, 2018, m the month ot January 
2018, taxi medallions sold for amounts ranging from $120,000 to $372,000. According to Sterling 
Employee-1 and Sterling Employee-2, they were never told that ^^^^igreed to a purchase 
price of $625,000 in exchange for a lump sum payment from Cohen, or that Cohen would make 

any payment to ' | 

c. On or about January 30, 2018, Sterling Employee-3 asked Cohen whether Cohen 
had a side agreement with pay sum of money for entering into the 

medallion transaction. Sterling Employee-3 asked Cohen about such an arrangement because, 

according to Sterling Employee-3, the price that HB^s for eaCh 

appeared to be well above the market price. Cohen stated, in sum and substance, that he had no 

side agreement—and never had a side agreement with 

27. While Cohen and^^^^H did not disclose any payment from Cohen to 
communications with Sterling, it appears that such a payment was contemplated. 
Indeed, based on my review of records maintained by ^fland my participation in an interview 
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learned the following, in substance and in part, regarding the proposed side 


with 1 have 

payment from Cohen to I 

a. On or about September 19, 2017 -^| prepared a memorandum for Cohen 
entitled, “Sale of NYC Medallion Entities and Debt Assumption” (the “| Memorandum”). 
xhe ^^viemorandum summarized the proposed transaction between Cohen and 
in part, as follows: “Michael and Laura Cohen will transfer ownership of their 13 NYC medalhon 
entities to a Buyer wh^ill^ssume-their bank indebtedness, upon the [Cohens’] paying down the 
debt portfolio of the 13 entities by $500,000 and a cash payment to the Buyer of $3,800,000. m24 

b. According to ^^^Cohen told him the parameters of the deal, including the 

payment of $3,800,000 to {^H|butH»<* 1 ™ W where Cohen WaS g ° iDg * *** 

$3,800,000 to pay As noted above, Cohen had more than $5,000,000 in cash and 

cash equivalents as of September 2017, but had only disclosed in his September 2017 Financial 
Statement that he had $1.25 million in cash. 

28. Based on my review of records maintained by Sterling (as well as Melrose, the bank 
with the participating interest in the loans) and reports of interviews of representatives of Sterling 

(and Melrose), 1 have seen no 
involved in the potential deal with Cohen and 

side payment from Cohen tc | 

The Illegal Campaign Contribution Scheme 


evidence that Sterling, Melrose, or any other financial institution 

lyas aware of the planned $3.8 million 



24 The reference to thirteen medallions appears to be an error by | | 
together owned sixteen corporations, which in turn owned 32 taxi medallions. 
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C. Probable Cause Justifying Search of the Subject Premises and Subject Devices 


45. Based on the foregoing, my review of records produced pursuant to subpoenas and 
the Cohen Email Warrants, and the iCloud Warrant, and my training and experience, there is 
probable cause to believe that the Subject Premises and Subject Devices have been used in 
furtherance of the Subject Offenses and are likely to contain instrumentalities, evidence, and fiuits 
of the Subject Offenses. Specifically, there is probable cause to believe that Cohen permanently 

resides at Subject Premises-1 and, at least in part, works at both Subject Premises-l and Subject 

*!• • • • V * 1 * 1 0 § • 

Premises-2 and that those locations contain evidence relating to the Sterling taxi medallion 
transaction, Cohen’s assets, Cohen’s consulting work for Essential Consultants LLC, and his 
Additionally, there is probable cause to believe that Subject Premises-3 
contains evidence of Cohen’s assets and Finally, there is probable cause 

to believe that Subject Premises-4, in which Cohen is temporarily residing, contains electronic 
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devices, including Subject Device-1 and Subject Device-2, which, in turn, contain evidence of the 


Subject Offenses, such as evidence relating to the Sterling taxi medallion transaction, Cohen s 
assets, Cohen’s consulting work for Essential Consultants LLC, and | 

46. First, there is probable cause to believe that Cohen lives and operates his businesses, 
at least in part, at Subject Premises-1. Specifically, from my review of property records, I know 
that Michael Cohen and Laura Cohen own (in trust) Subject Premises-1. From my review of 


Cohen’s tax returns, 1 know he lists his primaryresidence as Subject Premises-! .-Additionally— 
from my review of emails produced pursuant to the Cohen Email Warrants, I know that Cohen 
routinely refers to Subject Premises-1 as his home. For example, on or about September 28, 2017 
and October 6, 2017, Cohen emailed individuals that his home address is the address for Subject 
Premises-1. I also know from my review of emails that Cohen receives package delivery 
notifications that list Cohen’s address as the address for Subject Premises-1. Cohen has also 
provided the address of Subject Premises-1 as the address for Essential Consultants and Michael 
D. Cohen & Associates, P.C. For example, the certificates of incorporation and account opening 
documents at First Republic for both entities list their addresses as the address for Subject 
Premises-1. See supra ^ 18(b), 18(d). The consulting agreement between Essential Consultants 
and AT&T also indicated the address for Essential Consultants is the address for Subject Premises- 


1. See supra ]| 19(c). 

47. There is also probable cause to believe that Subject Premises-1 is likely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. Specifically, from my review of 
emails produced pursuant to subpoena and die Cohen Email Warrants and iCloud Warrant, as well 


as my training and experience, I know the following: 
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a. According to records maintained by Sterling, the address for all ol Cohen s taxi 
medallion LLCs is the address for Subject Premises-1. See supra 1 16(c). Additionally, the 
medallion loan documents indicate that any mailings related to the loans should be sent to Subject 
Premises-1. See id Based on my training and experience, as well as my review of public sources, 

1 know that individuals keep records of properties and assets in which they have ownership 
interests. Accordingly, I submit that Subject Premises-1 likely contains evidence of Cohen’s 
ownership of the taxi“medallioTT LLCs; the'revenue that those medallions generate, and the- 
transaction with Sterling in 2014 to re-finance the medallion loans that were then with Capital One 


Bank. 


b. From my review of records maintained by Sterling, 1 also know that Sterling 


addressed documents relating to the | 


transaction and Cohen’s attempts to modify the 


terms of the medallion loans to Subject Preraises-1. For instance, Sterling addressed the 
transaction term sheet, see supra 1 16(1), and its demand letter and notice of default, see supra 1 
1 6(q), to Subject Premises-1. Accordingly, Subject Premises-1 likely contams evrdence 

concerning the jxansaction and Cohen’s negotiations with Sterling. Some ol those 

I —were concealed from 


records—such as records relating to a payment from Cohen to 
Sterling and cannot be obtained via subpoena to Sterling. Additionally, even where documents 
were sent to Cohen by Sterling (and therefore are available from Sterling via subpoena), the fact 
that they may be found in Subject Premises-1 will be relevant to Cohen’s possession or knowledge 


of the documents. 

c. From my review of records maintained by First Republic, l know that Cohen 
provided the address for Subject Premises-1 as the mailing addresses for the Essential Consultants 
Account and MDC&A Account. See supra HI 18(b), 18(e). Accordingly, it is likely that Subject 
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Premises-1 contains records relating to the Essential Consultants Account and MDC&A Account, 
including, among other things, account opening documents, bank statements, documents provided 
as part of the know-your-customer process, any notes made by Cohen when he was opening the 
accounts, wire transfer records, and canceled checks. Even where these records can be obtained 
from First Republic, the fact that they may be found in Subject Premises-1 will be relevant to, 
among other things, Cohen’s ownership of the accounts, or his knowledge of transactions or the 

existence of funds in accounts. 

d. Based on my review of records maintained by Capital One Bank, TD Bank, Morgan 
Stanley, City National Bank, Signature Bank, and Bethpage Credit Union, I know that Cohen 
provided the address for Subject Premises-1 as the mailing for his accounts at each of these 
financial institutions. Accordingly, it is likely that Subject Premises-1 contains records relating to 
these accounts, including, among other things, bank statements that list account balances. The 
existence of these records in Subject Premises-1 wiU be relevant to, among other things, Cohen’s 
ownership of the accounts and his knowledge of the balances in these accounts. 

e. Additionally, Cohen may have records of other bank accounts or assets that weie 
not disclosed to Sterling and are not presently known by law enforcement. For example, as 
described above, Cohen has received interest income since 2015 that he has not disclosed to 
Sterling or paid taxes on. Also, on Cohen’s August 2014 Financial Statement, jee supra 116(e), 
he disclosed $10,000,000 in “investments in overseas entities.” 30 The value of these investments 
was omitted from subsequent financial statements. However, for the reasons outlined above, there 
is probable cause to believe that Cohen omitted the value of those investments from his 2017 


30 Based on my participation in an interview with Sterling Employee-3, l have learned that 
Cohen told Sterling Employee-3 that the reference to “investments m overseas entities on us 
2014 Financial Statement was to serve merely as a “placeholder” for potential future investments. 
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financial statements in order to understate his assets. As Subject Premises-1 is Cohen’s primary 
residence and he uses Subject Premises-1 as the mailing address for bank records, there is probable 
cause to believe that account statements for unknown bank accounts or assets concealed from 

Sterling are likely to be found in Subject Premises-1. 

f. Based on my review of records maintained by AT&T and produced pursuant to the 

Cohen Email Warrants, l know that the address Cohen provided to AT&T for Essential Consultants 
listheaddress for Subject Premises-1. See^upmV^%c): Therefore, there is probable cause-to - 
believe that Subject Premises-1 will contain evidence concerning the operation ot Essential 
Consultants or money that Cohen received, through Essential Consultants, from AT&T. 
Additionally, because Cohen used the address for Subject Premises-1 for at least one consulting 
arrangement involving Essential Consultants, there is probable cause to believe that Subject 
Premises-1 may contain records of other consulting arrangements that Cohen, through Essential 

Consultants, has with other individuals or entities. 

g. Based on my review of records maintained by iccounting firm, and emails 

produced pursuant to the Cohen Email Warrants, I have learned that '^^J^counting firm sent 
documents to Subject Premises-1 and used the address for Subject Premises-1 as the address listed 
on Cohen’s personal and corporate tax returns. See supra 1 16(n). For instance, on or about 
October 6, 2017, an employee accounting firm emailed Cohen that she had sent 

Cohen’s September 2017 Financial Statement by FedEx to Cohen’s attention. Accordingly. 
Cohen’s tax records are likely to be found in Subject Premises-1. 


h. Based on my review of bank records and publicly-available documents, I know that 
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i. Based on my review of emails produced pursuant to the Cohen Email Warrants and 
iCloud Warrant, 1 know that Cohen used at least one Apple iPhone, an Apple iPad Mini, and a 


MacBoolc Pro to access his iCloud account Based on thy review of location records provided by 
Apple pursuant to the iCloud Warrant, l know that electronic devices linked to Cohen’s iCloud 
account were used at Subject Premises-1 to, among other things, place telephone calls and backup 
Ales to Cohen’s iCloud account. Accordingly, there is probable cause to believe that Subject 
Premises-1 contains electronic devices, including certain Apple products, that lor reasons 

discussed below are likely to contain evidence of the Subject Offenses. 

j. Based on my review of emails produced pursuant to the Cohen Email Warrants, I 

understand that Subject Premises-1 recently sustained water damage to certain parts of the 
premises, and that Cohen has engaged contractors to perform certain remediation work on the 
premises. In addition, as set forth above, I believe that Cohen and his family are temporarily 
residing at Subject Premises-4 in the Loew’s Regency Hotel, which is approximately two blocks 
from Subject Premises-1. However, based on my review of a work order sent to Cohen’s email 
by a contractor, I understand that the first phase of the work order called for the contractor to "Pack 
& Remove all items & furnishings in Living Room, Kitchen, Sons Room & Dining Room” and 
store them off-site, hi addition, based on my review of drawings sent to Cohen by the contractor, 
it appears that the work is primarily being done in these rooms. Thus, 1 believe that the 
construction - to the extent it is still ongoing - would not necessarily have caused Cohen to move 


2017 . 08.02 


62 








Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 71 of 201 


all documents or evidence responsive to the warrant out ot Subject Premises-1, because it does not 
appear that work is being done to the portion of Subject Premises-1, such as a home office or 
Cohen’s own room, where such documents or evidence would most likely be found. 31 

48. Second, there is probable cause to believe that Cohen uses Subject Premises-2 as 
office space, and also that Subject Premises-2 contains certain electronic devices. Specifically, 
from my review of the “strategic alliance agreement” between Squire Patton Boggs and Cohen, 
and my review of the press release on Squire PattonBoggss website, I know that Cohen has an 
office at Subject Premises-2. See supra 18(d), 19(e). Indeed, I have learned that pursuant to 
Cohen’s agreement with the law firm, he has “dedicated and segregated office space in Squiie 
Patton Boggs’s offices on the 23rd floor of 30 Rockefeller Plaza, and that the space is “physically 
separate” from the firm’s offices and has “locked doors and its own locked file cabinets. See 
supra *[} 19(e). Additionally, I know that under the terms of the agreement, Cohen agreed to 
“arrange for [his] own computer server system that is not connected to [Squire Patton Boggs’s] 
computer network system.” I know from my participation in an interview with ^^^who me * 
Cohen at Subject Premises-2 in 2017, that Subject Premises-2 is an office with a door, it appears 
to be used only by Cohen, and it contains, among other things, a computer and paper files. 
According to when saw Cohen at Subject Premises-2, he had two cellular 

telephones in Subject Premises-2. I also know from my review of emails produced pursuant to tire 
Cohen Email Warrants that Cohen uses the address for Subject Premises-2 in the signature block 

31 As noted below, based on my training and experience, 1 believe that individuals who travel or 
stay in hotels for short-term periods commonly bring some items with them, such as portable 
electronic devices or sensitive items, meaning that Cohen has likely taken some evidence from 
Subject Premises-1 to Subject Premises-4. Nevertheless, given the temporary nature of Cohen’s 
stay at Subject Premises-4 and the scope of the work being done at Subject Premises-1,1 believe 
it is unlikely that Cohen has taken all evidence that would be subject to seizure out of Subject 
Premises-1. 
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on his emails. Based on my review of notes of a call between Cohen and First Republic Employee- 
2 (which notes were taken by another First Republic employee, who was participating in the call 
and taking notes), I know that, on or about November 15, 2017, Cohen told First Republic 
Employee-2 that he had a new office at 30 Rock. Moreover, I know from an article in Vanity Fair 
published on or about February 14, 2018, that Cohen was interviewed by the magazine in Subject 
Premises-2 in or about February 2018. 

49. There is also probable cause to believe that Subject Premises-2 isiikely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. Specifically, from my review of 
emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well 
as my training and experience, I know the following: 

a. According to records maintained by Sterling, when Cohen was emailing with 
Sterling Employee-3 in 2018 about a modification to his existing loan from Sterling, Cohen listed 
his address in his email as the address for Subject Premises-2. See supra 1j 16(t), 16(u). 
Accordingly, Subject Premises-2 likely contains evidence concerning Cohen’s loan modification 
negotiations with Sterling. 

b. Based on my review of records obtained pursuant to the Cohen Email Warrants, 1 
know that the address Cohen provided to KA1 and BTA for Essential Consultants is the address 
for Subject Premises-2. See supra fl 19(a), 19(b). Therefore, there is probable cause fo believe 
that Subject Premises-2 will contain evidence concerning the operation of Essential Consultants 
or money that Cohen received, through Essential Consultants, from KAI and BTA, among other 
entities with which Cohen had a consulting arrangement. Additionally, based on my review of 
emails sent in 2018 that were obtained pursuant to the Cohen Email Warrants, I know that Cohen 
continues to enter into consulting arrangements through Essential Consultants, and agreements 
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relating to those arrangements indicate that Essential Consultants is located at Subject Premises- 
2. Additionally, because Cohen used the address for Subject Premises-2 for multiple consulting 
arrangements involving Essential Consultants, there is probable cause to believe that Subject 
Premises-2 may contain records of other unknown consulting arrangements that Cohen has with 

other individuals or entities. 

c. Based on my review of records maintained by | ^^Jiccounting firm, and emails 
produced pursuant to the Cohen Email Warrarts, as well as my participation in an interview with 
HHgy L have learned that j^Jvisited Subject Premises-2 to meet with Cohen about his taxes. 
See supra 120(a). At that meeting, ^jiiscussed with Cohen whether Cohen should disclose 
Essential Consultants on his personal financial statement to banks. According, there is probable 
cause to believe that Subject Premises-2 will contain evidence relating to Cohen’s taxes, or notes 
of his conversation with Moreover, the fact that Cohen used Subject Premises-2 for a 

meeting regarding his personal financial matters provides probable cause to believe that documents 
and information regarding his finances will be found in Subject Premises-2. 

d. Based on my participation in an interview with I know that Cohen maintains 

a computer in Subject Premises-2. From my review of IP data produced pursuant to a subpoena 
and pen register to Google, it appears that Cohen is logging into his Gmail account from Subject 
Premises-2. Accordingly, there is probable cause to believe that Subject Prenuses-2 contains 
electronic devices, that for reasons discussed below are likely to contain evidence of the Subject 

Offenses. 

e. Based upon ray training and experience, I have learned that individuals who 
maintain businesses typically keep records relating to the business-such as contracts with clients 
and records of payments—at the business’ identified location. 1 am not aware of any addresses 


2017 . 08.02 


65 













Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 74 of 201 


r 

associated with Essential Consultants other than Subject Premises-1 and Subject Preinises-2. 

Accordingly, there is probable cause to believe that Subject Premises-1 and Subject Premises-2 
will contain business records for Essential Consultants. 

50. Third, there is probable cause to believe that Subject Premises-3 is likely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. In particular: 

a. As noted above, Cohen has two bank accounts at TD Bank. In or about November 

r 

2017, as Cohen was receiving substantial income fromcbnsultirig work—which he did not disclose 
to Sterling—Cohen opened the safety deposit box at TD Bank, which is Subject Premises-3. In 
light of the aforementioned evidence that Cohen conceals assets, including assets at TD Bank, 
there is probable cause to believe that Subject Premises-3 contains financial assets, objects of value 
and/or documents relating to such assets or objects of value that Cohen likely did not disclose to 
Sterling. Indeed, based on my training and experience, I am aware that people often conceal 
valuable items in safety deposit boxes. Accordingly, there is probable cause to believe that Subject 
Premises-3 will contain evidence of the Bank Fraud Offenses. 
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51. Based on my review of emails obtained pursuant to the Cohen Email Warrants and 


cell phone location information, I believe that Cohen is temporarily residing in Subject Premises- 
4. See supra ff 3(d). There is also probable cause to believe that Subject Premises-4 contains 


instrumentalities and evidence of the Subject Offenses, including, the following: 



33 As noted above. Subject Premises-3 is approxunately five inches by ten inches. Accordingly, I 
do not believe that it would fit a large volume of hard copy documents; however, a small number 
of hard-copy documents, or a large volume of documents contained on a flash drive or other 
portable storage device, would fit in Subject Premises-3. 

67 

2017 . 08.02 













Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 76 of 201 


b. As described above, at the time Cohen moved to Subject Premises-4, he was also 
in the midst of ongoing negotiations with Sterling regarding the refinancing of his medallion debts. 
For example, on January 30,2018, Cohen had a lengthy phone call with Sterling Employee-3 about 
his finances and the proposed restructuring, and on February 1, 2018, Cohen sent an email to 
Sterling Employee-3 claiming that he did not have more than $1.25 million in cash. See supra 

16(u). Thus, there is probable cause that Cohen took at least some documents and evidence relating 
to his ongoing negotiations with Sterling with him to SubjecFPremises-4, in order to reference and 
consult them in connection with these negotiations. 

c. As described above, Cohen used at least one Apple iPhone, an Apple iPad Mini, 
and a MacBook Pro to access his iCloud account, and these electronic devices linked to Cohen’s 
iCloud account were used at Subject Premises-1 - Cohens’ permanent residence - to place 
telephone calls and backup files to Cohen’s iCloud account. See supra It 47(i). Although Cohen’s 
stay at Subject Premises-4 is temporary, based on my training and experience I know that 
individuals who travel or stay in hotels for short-term periods commonly bring portable electronic 
devices with them, such as cellular phones, tablets, or laptops. Accordingly, there is probable 
cause to believe that Subject Premises-4, where Cohen currently appears to be residing, contains 
electronic devices, including Subject Device-1, Subject Device-2, and/or certain Apple products, 
that for the reasons discussed herein are likely to contain evidence of the Subject Offenses. 

d. Moreover, as set forth above, based on cellphone location information I know that 
Subject Device-1 and Subject Device-2 were in the vicinity of Subject Premises-4 as recently as 
this morning (April 8, 2018). As set forth above, there is probable cause to believe that Cohen 
used the Subject Devices in furtherance of tire Subject Offenses, including to communicate with 
Sterling employees regarding the medallion transaction, with First Republic employees regarding 
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the Essential Consultants Account, with his accountant regarding his finances, and with 

52. Although Cohen appeal's to be residing currently b Subject Premises-4, it is 
unknown whether Cohen will be physically present within Subject Premises-4 at the moment the 
warrant sought herein are executed. If Cohen is within Subject Premises-4 at that moment, Subject 
Device-1 and Subject Device-2 - his cellphones - will likely also be within Subject Premises-4. 

If Cohen isnotwithin Subject Premised that moment, the Wt«*will likely be on his person— 
wherever he is located (which, based on location data for Subject Device-1 and Subject Device-2 
as recently as today, is likely to be in the Southern District of New York). As such, this warrant 
seeks separate authority to seize Subject Device-1 and Subject Device-2, in the event that those 
devices are not located withb Subject Premises-4 (or another Subject Premises) at the moment the 

warrants sought hereb are executed. 

D. Probable Cause Justifying Search of ESI 

53. Based on the foregoing, there is probable cause to believe that Subject Premises-1, 

Subject Premises-2 and Subject Premises-4 contain electronic devices that are likely to contain 
evidence, fruits, and instrumentalities of the Subject Offenses (and, as set forth above, that Subject 
Device-1 and Subject Device-2 are themselves electronic devices that are likely to contain 
evidence of the Subject Offenses). Specifically, based on my review of information produced 
pursuant to the Cohen Email Warrants, the iCloud Warrant, and subpoenas, as well as pen register 
data, 1 submit that there is probable cause that Subject Premises-1 contains an Apple iPad Mini, a 
MacBook Pro, and has, at various times, contabed Apple cellphones; similarly, there is probable 
cause that Subject Premises-2 contains a computer and has, at various times, contained Apple 
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cellphones. These devices are likely to include evidence, fruits, and instrumentalities of the 
Subject Offenses for the following reasons: 

a. As described throughout this affidavit, Cohen used email to send and receive 

communications related to the Subject Offenses. In particular, Cohen used email to send and 
receive communications with Sterling, First Republic. the entities to which he is providing 

consulting services among others. While some of these emails have 

already been obtained via subpoenas and search warrants, I know from my training and experience 
that individuals can and do delete emails from their Internet-based inboxes but retain copies of 
those emails on their hard drives. I also know that individuals often have multiple email accounts, 
some of which may not be known to law enforcement, and as a result electronic devices can be a 
unique repository of all emails relevant to certain Subject Offenses. Indeed, from my involvement 
in this investigation, 11 enow that Cohen had an email account with the Trump Organization, but 
the USAO and FBI have not been able to obtain the contents of that account to date. Thus, emails 
relevant to the Subject Offenses are likely stored on electronic devices in Subject Premises-1, 
Subject Premises-2 and/or Subject Premises-4. 

b. Additionally, Subject Premises-1, Subject Premise-2 and Subject Premises-4 likely 
contain electronic copies of documents relevant to the Subject Offenses. Indeed, I know from my 
training and experience that individuals often retain copies of important documents on their 
computers or other electronic devices capable of storing information, including cellphones (such 
as the Subject Devices) and tablets. Here, there are a number of documents that Cohen has likely 
retained that will be relevant to the Subject Offenses. For example, electronic devices may include 
documentation of Cohen’s true net worth, a listing of his assets, an accounting of his available 
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cash, consulting agreements with third parties, and . 

among other evidence of the Subject Offenses. 

c. Third, I know from my review of emails obtained pursuant to the Cohen Email 

Warrants that Cohen sent up online banking with First Republic. Based on my training and 
experience, 1 know that individuals who set up online banking often receive electronic notices 
concerning financial transactions and, on occasion, save records of their financial transactions to 
their devices. Accordingly, there is probable cause to Believelhat Cohen’s electronic devices 
contain evidence of banking activity, including the existence of bank accounts or assets that Cohen 
did not disclose to Sterling or Melrose. 

d. Fourth, from my review of records produced by Apple, I know that Cohen 
communicates using text message as well as encrypted communications applications. These 
applications that Cohen has downloaded onto a phone include, but are not limited to, WhatsApp, 
Signal, and Dust. I know from my review of toll records and text messages that, in particular, 
Cohen communicated with ^^Jising these encrypted applications. Accordingly, there is 
probable cause to believe that Cohen’s cellphones - the Subject Devices - will contain encrypted 
messages that are not otherwise accessible relating to the Subject Ottenses. 

54. Based on my training and experience, I know that individuals who engage in 
financial crimes commonly use computers to communicate with co-conspirators, keep financial 
ledgers, and retain fraudulent documents. As a result, they often store data on their computers 
related to their illegal activity, which can include logs of online or cellphone-based chats with 
co-conspirators; email correspondence; contact information of co-conspirators, including 
telephone numbers, email addresses, and identifiers for instant messaging and social medial 
accounts; bank account numbers; and/or records of uses of funds. 
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55. Based on my training and experience, I also know that, where computers are used 
in furtherance of criminal activity, evidence of the criminal activity can often be found months or 
even years after it occurred. This is typically true because: 

• Electronic files can be stored on a hard drive for years at little or no cost and users thus 
have little incentive to delete data that may be useful to consult in the future, 

• Even when a user does choose to delete data, the data can often be recovered months 
or years later with the appropriate forensic tools. When a tile is “deleted” on a home 
computer, the data contained in the file does not actually disappear, but instead remains 
on the hard drive, in “slack space,” until it is overwritten by new data that cannot be 
stored elsewhere on the computer. Similarly, files that have been viewed on the Internet 
are generally downloaded into a temporary Internet directory or “cache,” which is only 
overwritten as the “cache” fills up and is replaced with more recently viewed Internet 
pages. Thus, the ability to retrieve from a hard drive or other electronic storage media 
depends less on when the file was created or viewed than on a particular user’s 
operating system, storage capacity, and computer habits. 

• In the event that a user changes computers, the user will typically transfer files from 
the old computer to the new computer, so as not to lose data. In addition, users often 
keep backups of their data on electronic storage media such as thumb drives, flash 
memory cards, CD-ROMs, or portable hard drives. 

56. Based on the foregoing, I respectfully submit there is probable cause to believe that 
Cohen engaged in the Subject Offenses, and that evidence of this criminal activity is likely to be 
found in the Subject Premises, on computers and electronic media found in the Subject Premises, 
and on the Subject Devices. In particular, there is probable cause to believe that the Subject 
Premises and Subject Devices will contain evidence, fruits, and instrumentalities of violations of 
the Subject Offenses, as more fully described in Section II of Attachments A, B, C, D, E and F to 
the proposed warrants, including tire following: 

a. Evidence necessary to establish the occupancy or ownership of die Subject 
Premises, including without limitation, utility and telephone bills, mail envelopes, addressed 
correspondence, bank statements, identification documents, and keys. 

b. Evidence relating to Sterling, Melrose, and/or taxi medallions. 
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c. Evidence relating to a plan, proposal, or agreement for Cohen and/or entities 
associated with him to transfer any interest in taxi medallions, and any associated debts or 


liabilities, to others, including to 


nd/or entities associated with him. 


d. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

e. Evidence relating to Essential Consultants, LLC, including any documents that 


indicate the nature^nd purpose copayments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

f. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

g. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records. 

h. Evidence relating to agreements, loans, and/or financial transactions between 


Cohen and 


and any payments by 


o Cohen. 
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relating to Cohen’s bank accounts, taxes, debts, and/or finances: 

q. Communications, records, documents, and other files leflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, 

r. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

III. Procedures for Searching ESI 
A. Execution of Warrant for ESI 

57. Federal Rule of Criminal Procedure 41(e)(2)(B) provides that a warrant to search 

for and seize property “may authorize the seizure of electronic storage media or the seizure or 
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copying of electronically stored information ... for later review.” Consistent with Rule 41, this 
application requests authorization to seize any computer devices and storage media and transport 
them to an appropriate law enforcement facility for review. This is typically necessary for a numbei 
of reasons: 

• First, the volume of data on computer devices and storage media is often impractical 
for law enforcement personnel to review in its entirety at the seaich location. 

• Second, because computer data is particularly vulnerable to inadvertent or intentional 
modification or destruction, computer devices are ideally examined in a controlled 
environment, such as a law enforcement laboratory, where trained personnel, using 
specialized software, can make a forensic copy of the storage media that can be 
subsequently reviewed in a manner that does not change the underlying data. 

• Third, there are so many types of computer hardware and software in use today that it 
can be impossible to bring to the search site all of the necessary technical manuals and 
specialized personnel and equipment potentially required to safely access the 
underlying computer data. 

• Fourth, many factors can complicate and prolong recovery of data from a computer 
device, including the increasingly common use of passwords, encryption, or othei 
features or configurations designed to protect or conceal data on the computer, which 
often take considerable time and resources for forensic personnel to detect and resolve. 

58. As discussed herein. Squire Patton Boggs is a functioning law fiim that conducts 
legitimate business unrelated to Cohen’s commission of the Subject Offenses. Subject Premises- 
2 is an office located inside of Squire Patton Boggs’s New York office. In order to execute the 
warrant in the most reasonable fashion, law enforcement personnel will attempt to investigate on 
the scene of what computers or storage media, if any, must be seized or copied, and what computers 
or storage media need not be seized or copied. Law enforcement personnel will speak with Squire 
Patton Boggs personnel on the scene as may be appropriate to determine which files and electronic 
devices within Subject Premises-2 belong to or were used by Cohen. While, based on the 
foregoing, it does not appear that Cohen shared electronic devices or a server with Squire Patton 
Boggs, where appropriate, law enforcement personnel will copy data, rather than physically seize 
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computers, to reduce the extent of any disruption of Squire Patton Boggs's operations. If, after 
inspecting the seized computers off-site, it is determined that some or all of this equipment is no 
longer necessary to retrieve and preserve the evidence, the Government will return it. 

59. Additionally, because Cohen is an attorney, and claims to serve as a personal 
attorney for Trump, the review of evidence seized from the Subject Premises and Subject Devices 
wiU be conducted pursuant to established screening procedures to ensure that the law enforcement 
personnel involved In the investigation; mcludirti aftoFfiiys for the Government, collect evidence - 
in a manner reasonably designed to protect any attorney-client or other applicable privilege. When 
appropriate, the procedures will include use of a designated “filter team,” separate and apart from 
the investigative team, in order to review potentially privileged communications and detetmine 
which communications to release to the investigation and prosecution team. 

B. Accessing ESI on the Subject Devices 

60. As described above, the Subject Devices are both Apple brand devices. 

61. I know from my training and experience, as well as from infomtation found in 
publicly available materials including those published by Apple, that some models of Apple 
devices such as iPhones and iPads offer their users the ability to unlock the device via the use of a 
fingerprint or thumbprint (collectively, “fingerprint”) in lieu of a numeric or alphanumeric 
passcode or password. This feature is called Touch ID. I also know that the Apple iPhone X offers 
its users the ability to unlock the device via the use of facial recognition (through infrared and 
visible light scans) in lieu of a numeric or alphanumeric passcode or password. This feature is 

called Face ID. 

62. If a user enables Touch ID on a given Apple device, he or she can register up to 5 
fingerprints that can be used to unlock that device. The user can then use any of the registered 
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fingerprints to unlock the device by pressing the relevant fmger(s) to the device’s Touch ID sensor, 
which is found in the round button (often referred to as the “home” button) found at the bottom 
center of the front of the device. If a user enables Face ID on a given Apple device, he or she can 
unlock the device by raising the iPhone to his or her face, or tapping the screen. In my training 
and experience, users of Apple devices that offer Touch ID or Face ID often enable it because it is 
considered to be a more convenient way to unlock the device than by entering a numeric or 
alphanumeric passcode or password, as well as a more secure way to protect the device’s contents. 

63. In some circumstances, Touch ID or Face ID cannot be used to unlock a device that 
has either security feature enabled, and a passcode or password must be used instead. These 
circumstances include: (1) when the device has just been turned on or restarted; (2) when more 
than 48 hours has passed since the last time the device was unlocked; (3) when the passcode or 
password has not been entered in the last 6 days, and the device has not been unlocked via Touch 
ID in the last 8 hours or the device has not been unlocked via Face ID in the last 4 hours; (4) the 
device has received a remote lock command; or (5) five unsuccessful attempts to unlock the device 
via Touch ID or Face ID are made. 

64. The passcodes or passwords that would unlock the Subject Devices are not known 
to law enforcement. Thus, it will likely be necessary to press the fingers of the user of the Subject 
Devices to the devices’ Touch ID sensor, or hold the Subject Devices in front of the user’s face to 
activate the Face ID sensor, in an attempt to unlock the devices for the purpose of executing the 
search authorized by this warrant. Attempting to unlock the relevant Apple devices via Touch ID 
with, the use of the fingerprints of the user, or via Face ID by holding the device in front of the 
user’s face, is necessary because the government may not otherwise be able to access the data 
contained on those devices for the purpose of executing the search authorized by this warrant. 
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65. Based on these facts and my training and experience, it is likely that Cohen is the 
user of the Subject Devices, and thus that his fingerprints are among those that are able to unlock 
the Subject Devices via Touch ID or his face is able to unlock the Subject Devices via Face ID. 

66. Although I do not know which of a given user’s 10 fingerprints is capable of 
unlocking a particular device, based on my training and experience 1 know that it is common for a 
user to unlock a Touch ID-enabled Apple device via the fingerprints on thumbs or index fingers. 
In the cventlhat law enforcement is unablelo unloclCtfie Subject Devices as~descfibed above 
within the five attempts permitted by Touch ID, this will simply result in the device requiring the 
entry of a password or passcode before it can be unlocked. 

67. I also know from my training and experience, and ray review of publicly available 
materials published by Apple that Apple brand devices, such as the Subject Devices, have a feature 
that allows a user to erase the contents of the device remotely. By logging into the Internet, the 
user or any other individual who possesses the user’s account information can take steps to 
completely wipe the contents of the device, thereby destroying evidence of criminal conduct, along 
with any other information on the device. The only means to prevent this action is to disable the 
device’s ability to connect to the Internet immediately upon seizure, which requires either access 
to the device itself to alter the settings, or the use of specialized equipment that is not consistently 
available to law enforcement agents at every arrest. 

68. Due to the foregoing, I request that the Court authorize law enforcement to press 
the fingers (including thumbs) of Cohen to the Touch ID sensors the Subject Devices, or hold the 
Subject Devices in front of Cohen’s face, for the purpose of attempting to unlock the Subject 
Devices via Touch ID or Face ID in order to search the contents as authorized by this warrant. 
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C. Review of ESI 

69. Following seizure of any computer devices and storage media and/or the creation 
of forensic image copies, law enforcement personnel (including, in addition to law enforcement 
officers and agents, and depending on the nature of the ESI and the status of the investigation and 
related proceedings, attorneys for the government, attorney support staff, agency personnel 
assisting the government in this investigation, and outside technical experts under government 
control) will review the ESI contained therein for information responsive to the warrant'. 

70. In conducting this review, law enforcement personnel may use various techniques 
to determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such 
techniques may include, for example: 

• surveying directories or folders and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• conducting a file-by-file review by “opening” or reading the first few “pages” of such 
files in order to determine their precise contents (analogous to performing a cursory 
examination of each document in a file cabinet to determine its relevance); 

• “scanning” storage areas to discover and possibly recover recently deleted data or 
deliberately hidden files; and 

• performing electronic keyword searches through all electronic storage areas to 
determine the existence and location of data potentially related to the subject matter of 
the investigation 34 ; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 


34 Keyword searches alone are typically inadequate to detect all relevant data. For one thing, 
keyword searches work only for text data, yet many types of files, such as images and videos, do 
not store data as searchable text. Moreover, even as to text data, there may be information properly 
subject to seizure but that is not captured by a keyword search because the information does not 
contain the keywords being searched. 
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71. Law enforcement personnel will make reasonable efforts to restrict their search to 
data falling within the categories of evidence specified in the warrant. Depending on the 
circumstances, however, law enforcement personnel may need to conduct a complete review of all 
the ESI from seized devices or storage media to evaluate its contents and to locate all data 

responsive to die warrant. 

D. Return of ESI 

72. If the Government determin^tfiat the electronic devices-aremo longer necessary 
to retrieve and preserve the data, and the devices themselves are not subject to seizure pursuant to 
Federal Rule of Criminal Procedure 41(c), the Government will return these items, upon request. 
Computer data that is encrypted or unreadable will not be returned unless law enforcement 
personnel have determined that the data is not (i) an instrumentality of the offense, (u) a tmit ol 
the criminal activity, (Hi) contraband, (iv) othenvise unlawfully possessed, or (v) evidence of the 

Subject Offenses. 
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AO 93 (SDNY Rev. 05/10) Search and Seizure Wairant 


United States District Court 

for the 

Southern District of New York 


In the Matter of the Search of ) 

(Briefly describe (he property to he searched ) 

or identify the person by name and addi^ss) ) C a se N0, 

Loews Regency Hotel, 540 Park Avenue, Room 1723, } 

New York, New York 10065, and any closed ' 

containers/items contained therein, See Attachment D J 

SEARCH AND SEIZURE WARRANT 


To: ’ Any authorized law enforcement officer 

__ An application b y a federal law enfor c ement o fficer or an attor ney ft* the government requests the searct^_ 

of the following person or property located in the _ Southern District of _ New York _ 

(identify the person or describe the property to be searched and give its heat ton) l 

Loews Regency Hotel, 540 Park Avenue, Room 1728, Mew York, New York 10065, and any dosed containers/items 
contained therein, See Attachment D 

The person or property to be searched, described above, is believed to conceal (identify the person or describe the 

property to be seized)'* 

See Attachment D 


I find that the affidavitfs), or any recorded testimony, establish probable cause to search and seize the person or 
property. 




YOU ARE COMMANDED to execute this warrant on or before 

in the daytime 6:00 a,m, to 10 pm. D at any time in the day or 

established. 


(not to exceed 14 days) 

night as I find reasonable came has been 


Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the properly was taken, or leave the copy and receipt at the 
place where the properly was taken, 

The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an 
inventory as required by law and promptly return this warrant and inventoiy to the Clerk of the Court* 

Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court__„_„ 

... USMJ Initials 


□ I find that immediate notification may have an adverse result listed in 18 US + C § 2705 (except for delay 
of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be 

SOarched or seized (check the appropriate box) Ofor _days (not to exceed 30)* 

□until, die facts justifying, the later specific date of _ 


Date and time issued: 


M-Y-IS 7-m f -„. 


A/ MrirxCy th 

~ 7 Judge *$ signature 


Oily and state: New York. NY 


Hon. Henrv B. Pitman. U.5. Magistrate Judge 

Printed name md title 
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AO 93 (Kev. 01/09) Search and Seizure Warrant (Page 2) 



Return 


Case No.: 

Date and time warrant executed: 

Copy of-warrant and inventory left with: 

Inventory made in the presence of: 


Inventory of the property taken and name of any petson(s) seized: 



Certification 


I declare under penally of perjury that tins inventory is correct and was returned along with the original warrant 
to the Court* 


Date: 


Executing officer *s signature 


Printed name and title 
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ATTACHMENT D 

I, Premises to be Searched—Subject Premises-4 

The premises to be searched (“Subject Premises-4 !5 ) are described as follows, and include 
electronic devices, and all locked and closed containers found therein: 

Room 1728 located inside the Loews Regency Hotel at 540 Parle Avenue, New York, New 
York 10065. The building is a luxury hotel located on Park Avenue and 61st Street. Subject 
Premises-4 is located on the 17th floor of the hotel. 

H, Items to Be Seized 

A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 

_Theitems-tobes eizedfrom Subjectlremises^Aare.e.videncc^ fruits , jn<i in stormenta lities 

of violations of 18 U-S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§ 30116(a)(1)(A) and 30l09(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 
medallions, from January 1,2013 to the present. 

b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or 

entities associated with him to trau^^mWutwestiii taxi medallions, and any associated debts or 
liabilities, to others, including to rd/or entities associated with him. 

c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

e. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, 'including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 

i p JP.yi de ncc relating to ^ agre e ment s, loans, and/or financial transactions between 
Cohen and entities controlled by | 
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| and any payments by Cohen, from January 

1,2012 to the present. _~ _ 


o. Communications with others, including and/or other account ante, 

relating to Cohen’s bank accounts, taxes, debts, and/or finances, from January 1, 2013 to the 
present, 

p. Communications, records, documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1, 2013 to the present, 

q. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information falling within the categories 
set forth in Section II. A of this Attachment above, including, but not limited to, a MacBook Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk 
drives, thumb drives, and personal digital assistants. In lien of seizing any such computer devices 
or storage media, this warrant also authorizes the copying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media; including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 

3. Any evidence concerning the identities or locations of thosepersons with access to, 
■control over, of ownership of the seized or copied computer devices of-storage-tnedia. 

C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel assisting the government in this investigation, and outside technical experts under 
government control) are authorized to reviewthe ESI contained therein for information responsive 
to the warrant. 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example. 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• opening or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through all electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
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Law enforcement personnel will make reasonable efforts to search only foi files, 
documents, or other electronically stored information within the categories identified in Sections 
II,A and ILB of this Attachment. However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “filter team,” separate and apart from the investigative team, in order to 
address potential privileges. 
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UNITED STATES DISTRICT COURT 
SOUTHERN DISTRICT OF NEW YORK 


In the Matter of the Application of the United 
States of America for a Search and Seizure 
Warrant for the Premises Known and Described 
as Loews Regency Hotel, 540 Park Avenue, 
Room 1628, a Suite that Encompasses Rooms 
1628, 1629, and 1630 New York, New York 
10065, and Any Closed Containers/Items 
Contained Therein 
Reference No. 2018R00127 


TO BE FILED UNDER SEAL 

Agent Affidavit in Support of 
Application for Search and Seizure 

Warrant 


SOUTHERN DISTRICT OF NEW YORK) ss.: 

.. 3peciaLAgent,-EederaLBurean.oOnvestigation, being duly, sworn, 

deposes and says: 


I. Introduction 



2. On or about April 8, 2018, the Honorable Henry B. Pitman, United States 
Magistrate Judge, issued a search and seizure warrant for the premises known and described as 
Loews Regency Hotel, 540 Park Avenue, Room 1728, New York, New York 10065, and Any 
Closed Containers/Items Contained Therein. The warrant and my supporting affidavit (the 
“Affidavit”) are appended hereto. The Affidavit is incorporated herein by reference in its entirety 

as Exhibit A. 
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3. On or about April 9,2018, based upon a conversation with another law enforcement 
agent who spoke to an employee of Loews Regency Hotel, I learned that Michael Cohen is in fact 
staying in Room 1628 (in a suite encompassing rooms 1628,1629, and 1630) (collectively, “Room 
1628”), not Room 1728. Accordingly, I respectfully submit the attached amended warrant 
pursuant to Rule 41 of the Federal Rules of Criminal Procedure for the following Subject Premises: 
Loews Regency Hotel, 540 Park Avenue, Room 1628, New York, New York 10065, and Any 
Closed Containers/Items Contained Therein (“Subject Premises-4”), For the reasons detailed in 
the Affidavit and herein, I believe that there is probable cause to believe that Subject Premises-4 
contains evidence, fruits, and instrumentalities of violations of f8 U.S.C. §§ 1005 (false bank 
entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 (bank fraud) 
(collectively, the “Bank Fraud Offenses”), 52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) 
(illegal campaign contributions) (the “Campaign Finance Offenses”), and 18 U.S.C. §§ 371 
(conspiracy as it pertains to the other Subject Offenses) (collectively, the “Subject Offenses”). 

4. Based on the foregoing, I respectfully request the court to issue a warrant to seize 
the items and information specified in Attachment A to this affidavit and to the Search and Seizure 
Warrant. 
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5. In light of the confidential nature of the continuing investigation, I respectfully 
request that this affidavit and all papers submitted herewith be maintained under seal until the 
Court orders otherwise. 



Special Agent 
FBI 


Sworn to before me on 
9th day of April, 2018 


I tM^[ 


n 

P. 






HON. HENRY B. 'PITMAN 
UNITED STATES MAGISTRATE JUDGE 
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ATTACHMENT A 

I. Premises to be Searched—Subject Premises-4 

The premises to be searched (“Subject Premises-4”) are described as follows, and include 
electronic devices, and all locked and closed containers found therein: 

Room 1628 (a suite encompassing rooms 1628, 1629, and 1630) (collectively, “Room 
1628”), located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 
10065. The building is a luxury hotel located on Park Avenue and 61st Street Subject Premises- 
4 is located on the 16th floor of die hotel. 

II. Items to Be Seized 

A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 

Tfi^ifems to beTsei zwTfrom Subjecf Premises-4 are evidence, fruits, and instrumentalities 
of violations of 18 U.S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 
medallions, from January 1,2013 to the present. 

b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or 
entities associated with him to tr ansfej^r ivinter^t in taxi medallions, and any associated debts or 
liabilities, to others, including to |HHH|HHmd/or entities associated with him. 

c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

e. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 

g. Evidence relating to agreement s, loans, and/or financial transactions between 

Cohen and entities controlled by t| 
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relating to Cohen’s bank accounts, taxes, debts, and/or finances, from January 1, 2013 to the 
present 


p. Communications, records, documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1,2013 to the present. 

q. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information falling within the categories 
set forth in Section II.A of this Attachment above, including, but not limited to, a MacBook Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession,- an Apple iPad Mini, portable hard drives, disk 
drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices 
or storage media, this warrant also authorizes die copying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media, including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 

3. Any evidence concerning the identities or locations of those persons with access to, 
control over, or ownership of the seized or copied computer devices or st orage media. 

C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel assisting the government in this investigation, and outside technical experts under 
government control) are authorized to review the ESI contained therein for information responsive 
to the warrant 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example: 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• opening or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through all electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
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Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Sections 
II* A and ILB of this Attachment. However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “filter team,” separate and apart from the investigative team, in order to 
address potential privileges. 
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UNITED STATES DISTRICT COURT 
SOUTHERN DISTRICT OF NEW YORK 


In the Matter of the Application of the United 
States of America for a Search and Seizure 
Warrant for the Premises Known and Descr ibed 
as (1) 502 Park Avenue, 

York, New York 10022, (2) Michael Cohen’s 
Office at 30 Rockefeller Plaza, 23rd Floor, New 
York, New York 10112, (3) Safe Deposit Box # 
I Located at the TD Bank Branch at 500 Park 
/vvenue. New York, New York 10019, and (4) 
Loews Regency Hotel, 540 Park Avenue, Room 
1728, New York, New York 10065, and Any 
Closed Containers/Items Contained Therein, and 
the Electronic Devices Known and Described as 
(1) an Apple iPhone with Phone Number 
^^^^■and (2) an Apple iPhone with Phone 


TO BE FILED UNDER SEAL 

Agent Affidavit in Support of 
Application for Search and Seizure 

Warrant 


Number 

Reference No. 2018R00127 


SOUTHERN DISTRICT OF NEW YORK) ss.: 

Special Agent, Federal Bureau of Investigation, being duly sworn, 

deposes and says: 


I. Introduction 


A. Affiant 



2. I make this Affidavit in support of an application pursuant to Rule 41 of the Federal 
Rules of Criminal Procedure for a warrant to search the premises specified below (the ‘‘Subject 


2017 . 08.02 


2 










Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 104 of 201 


Premises”) and the electronic devices specified below (the “Subject Devices”) for, and to seize, 
the items and information described in Attachments A, B, C, D, E and F. This affidavit is based 
upon my personal knowledge; my review of documents and other evidence; my conversations with 
other law enforcement personnel; and my training, experience and advice received concerning the 
use of electronic devices in criminal activity and the forensic analysis of electronically stored 
information (“ESI”). Because this affidavit is being submitted for the limited purpose of 
establishing probable cause, it does not include all the facts that I have learned during the couise 
of my investigation. Where the contents of documents and the actions, statements, and 
conversations of others are reported herein, they are reported in substance and in part, except where 
otherwise indicated. 

B. The Subject Premises and Subject Devices 

3. Subject Premises-1, Subject Premises-2, Subject Premises-3 and Subject Premises- 

4 (collectively, the “Subject Premises”) are particularly described as: 

a. Subject Premises-1 is Apartment | located inside the building at 502 
Park Avenue, New York, New York 10022. The building located at 502 Park Avenue is a 32- 
floor brick residential building. Subject Premises-1 is located on the floor of the building. 
Based on my review of New York City property records, I have learned that Michael Cohen arid 
Laura Cohen own Subject Premiscs-1. 1 Additionally, as described below, Subject Preinises-l is 
Cohen’s full-time residence. 

b. Subject Premises-2 is an office located on the 23rd floor of the building at 
30 Rockefeller Plaza, New York, New York 10112. The building located at 30 Rockefeller Plaza 


1 As noted infra, I have learned that on or about October 28, 2015, Cohen transferred Subject 
Premises-1 into a trust. 
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is a 66-floor office building that spans the entire block between Sixth Avenue and Rockefeller 
Plaza. Subject Premises-2 is located on the 23rd floor of the building inside of the offices of the 
law firm Squire Patton Boggs. The office is assigned to Michael Cohen. As described below, 
Michael Cohen works and conducts meetings at Subject Premises-2. 

c. Subject Premises-3 is a safety deposit box located inside the TD Bank 
branch location at 500 Park Avenue, New York, New York 10019. Based on my review of records 
maintained by TD Bank, f have learned that the safety-deposit box is approximately five inches by 
ten inches in size, and is marked as box The safety deposit box is in the name of Michael 
Cohen and Laura Cohen. 

d. Subject Premises-4 is Room 1728 located inside the Loews Regency Hotel 
at 540 Park Avenue, New York, New York 10065. The building is a luxury hotel located on Park 
Avenue and 61st Street. Subject Premises-4 is located on the 17th floor of the hotel. Based on my 
review of emails obtained pursuant to search warrants described below, I have learned that on or 
about January 5, 2018, Cohen received an email from an employee of Loews Regency, which 
included a price quote for a long-term stay suite based on a three-month stay from January 8 to 
April 8,2018. 2 On or about January 29,2018, Cohen sent an email to a Loews Regency employee, 
stating, in pertinent part: “I just spoke to my wife and she has scheduled the move for Thursday. 
Please mark down that we will be taking possession on Thursday, February 1st.” Based on my 
review of cell phone location data, I have learned that, over the past 24 hours, two cellular phones 
used by Cohen have been located in the vicinity of Subject Premises-4. In particular, on or about 


2 Although the quoted price contemplated a three-month stay from January 8 to April 8, it appears 
that Cohen did not move in until February 1, and as of today, April 8, cellphone location 
information demonstrates that Cohen’s cellular phones are in still in the vicinity of Subject 
Premises-4. 
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April 8, 2018, law enforcement agents using a “triggerfish” device identified Room 1728 as the 
room within the hotel in which the Subject Devices are most likely present. 3 

e. Therefore, I believe that Cohen is temporarily residing in Subject 


Premises-4. 

4. Subject Device-1 and Subject Device-2 (collectively, the “Subject Devices”) are 


particularly described as; 

-a;—Subject Device-1 is an Apple iPhone serviced by AT&T with the telephone number 

Based on my review of records maintained by AT&T, 1 have learned that Subject 
Device-1 is subscribed to Michael Cohen. Based on my review of cellphone location information 
maintained by AT&T, I have learned that Subject Device-1 is presently located in the Southern 
District of New York. 

b. Subject Device-2 is an Apple iPhone serviced by AT&T with the telephone number 
Based on my review of records maintained by AT&T, I have learned that Subject 
Device-2 is subscribed to Michael Cohen. Based on my review of cellphone location information 
maintained by AT&T, I have learned that Subject Device-2 is presently located in the Southern 


District of New Y ork. 

c. Based on my training, experience, and research, and from consulting the 
manufacturer’s and service providers’ advertisements and product technical specifications 
available online, I know that the Subject Devices have capabilities that allow them to, among other 
things: make and receive telephone calls; save and store contact information; send and receive 


3 Based on my conversations with these agents, I understand that it is also possible that the Subject 
Devices are one floor below, in Room 1628. However, as noted, l understand that Cohen received 
a price quote for a long-term stay suite and is residing there with his family. Based on my 
conversations with FBI agents conducting surveillance, I understand that Room 1728 appears to 
be a suite, whereas Room 1628 appears to be a standard room. 
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emails and text messages; download and run mobile telephone applications, including encrypted 
call and messaging application such as WhatsApp, Signal, and Dust; take, send, and receive 
pictures and videos; save and store notes and passwords; and store documents. 

C. The Subject Offenses 

5. For the reasons detailed below, I believe that there is probable cause to believe that 
the Subject Premises and Subject Devices contain evidence, fruits, and instrumentalities of 
violations of 18 UrS.Gr^§§ 1005 (false bank entries), 1014 (false-statements to a financial 
institution), 1343 (wire fraud), and 1344 (bank fraud) (collectively, the “Bank Fraud Offenses”), 
52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)( 1)(A)( 1) (illegal campaign contributions) (the 
“Campaign Finance Offenses”), and 18 U.S.C. §§ 371 (conspiracy as it pertains to the other 
Subject Offenses) (collectively, the “Subject Offenses”). 

D. Prior Applications 

6. The FBI and the United States Attorney’s Office for the Southern District of New 
York (“USAO”) have been investigating several courses of criminal conduct by Michael Cohen. 
Cohen is an attorney who currently holds himself out as the personal attorney for President Donald 
Trump, and who previously served for over a decade as an executive in the Trump Organization, 
an international conglomerate with real estate and other holdings. 

7. In connection with an investigation then being conducted by the Office of the 
Special Counsel (“SCO”), the FBI sought and obtained from the Honorable Beryl A. Howell, Chief 
United States District Judge for the District of Columbia, three search warrants for emails and 
other content information associated with two email accounts used by Cohen, and one search 
warrant tor stored content associated with an iCloud account used by Cohen. Specifically. 
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a. On or about July 18,2017, the FBI sought and obtained a search warrant for 


emails in the account 


l@gmail.com (the “Cohen Gmail Account”) sent or received 
between January 1, 2016 and July 18, 2017 (the “First Cohen Gmail Warrant”). 

b. On or about August 8, 2017, the FBI sought and obtained a search warrant 

■@gmail.com (the 


for content stored in the iCloud account associated with Apple ID 
“Cohen iCloud Account” and the “Cohen iCloud Warrant”). 

— c. On or about November 13, 2017, die FBI sought and-obtained-a search 
warrant for emails in the Cohen Gmail Account sent or received between June 1, 2015 and 
November 13, 2017 (the “Second Cohen Gmail Warrant”). 

d. On or about November 13, 2017, the FBI sought and obtained a search 


warrant for emails in the account 


I (the “Cohen MDCPC Account”) sent or 


received between the opening of the Cohen MDCPC Account 4 and November 13,2017 (the Fiist 
Cohen MDCPC Warrant”). 

8. The SCO has since referred certain aspects of its investigation into Cohen to the 
USAO, which is working with the FBI’s New York Field Office. As part of that referral, on or 
about February 8, 2018, the SCO provided the USAO with all non-privileged emails and other 
content information obtained pursuant to the First Cohen Gmail Warrant, Second Cohen Gmail 

(f • vi'*• 

Warrant, and Cohen MDCPC Warrant. On or about March 7, 2018, the SCO provided the USAO 


4 Based on my review of this warrant and the affidavit in support of it, I know that the warrant did 
not specify a tune period, but the affidavit indicated that, pursuant to court order, the service 
provider had provided non-content information for the Cohen MDCPC Account that indicated that 
the account contained emails from the approximate period of March 2017 through the date of the 
warrant. 
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with all non-privileged content obtained pursuant to the Cohen iCloud Warrant. * 5 A filter team 
working with the SCO had previously reviewed the content produced pursuant to these warrants 

for privilege. 

9. On or about February 28,2018, the USAO sought and obtained search warrants for 
emails in the Cohen Gmail Account and the Cohen MDCPC Account, among other accounts, sent 
or received between November 14,2017 and February 28,2018 (the "Third Cohen Gmail Warrant” 
and the “Second-Cohen MDCPC Warrant”). The content produced pursuant to these warrants is- 
subject to an ongoing review for privilege by an SDNY filter team. 6 

10. The emails search warrants described above are referred to collectively as the 

“Cohen Email Warrants.” 

11. On or about April 7, 2018, the USAO and FBI sought and obtained a warrant for 
prospective and historical cellphone location information for Subject Device-1 and Subject 
Device-2. On or about April 8,2018, the USAO and FBI sought and obtained authority to employ 
an electronic technique, commonly known as a “triggerfishto determine the location of Subject 
Device-1 and Subject Device-2. 

II. Probable Cause 
A. Overview 

12. The United States Attorney’s Office for the Southern District of New Y ork and FBI 
are investigating, among other things, schemes by Target Subject Michael Cohen (a) to defraud 
multiple banks from in or about 2016 up to and including the present, and (b) to make an illegal 

s The SCO had previously provided a subset of this non-privileged content on or about February 

2, 2018. 

6 On or about February 28, 2018 and April 7, 2018, the USAO and FBI sought and obtained Rule 
41 search warrants authorizing the search of emails and content obtained pursuant to previously 
issued warrants for additional subject offenses. 
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campaign contribution in October 2016 to then-presidential candidate Donald Tramp. As noted, 
Cohen is an attorney who currently holds himself out as the personal attorney for President Donald 
Tramp, and who previously served for over a decade as an executive in the Tramp Organization, 
an international conglomerate with real estate and other holdings. 

13. The investigation has revealed that Cohen has made affirmative misrepresentations 
in and omitted material information from financial statements and other disclosures that Cohen 
provided to~multiple banks-in connection with a transaction intended to-relieve Cohen of 
approximately $22 million in debt he owed on taxi medallion loans from the banks. As set forth 
in detail below, in these financial statements, and in his oral and other written statements to these 
banks, Cohen appears to have (i) intentionally misrepresented his ability to pay cash by failing to 
disclose cash he began receiving in 2017 from new consulting work; (ii) significantly understated 
his total holdings of cash and cash equivalents; (iii) failed to disclose tens of thousands ot dollais 
he received in monthly interest income, and (iv) failed to inform the banks from which he was 
seeking debt relief that he had agreed to make a $3.8 million cash payment to a third party, HH 
Jin connection with ^^^^^^icquisition of the taxi medallions securing Cohen’s 
debt. By making these misrepresentations and material omissions, Cohen avoided making 


monthly payments on his loans, and attempted to fraudulently induce the banks to lelieve him of 
certain repayment obligations and personal guarantees that Cohen and his wife had signed. 
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15. Based on my review of emails obtained from the Cohen Email Warrants, 
information obtained pursuant to the iCloud Warrant, and documents produced pursuant to 
subpoenas, as well as my review of public sources, I have learned that Cohen has used the Subject 


Premises to (a) receive documents related to the transaction intended to relieve Cohen of his taxi 
medallion debt, (b) receive documents and/or conduct meetings related to his consulting work, (c) 
receive documents and/or conduct meetings relating to his finances and assets, some of which, as 
noted above and as detailed further herein, he has concealed from the banks in connection with the 
refinancing of his taxi medallion debt, (d) | 

| and (e) house and operate electronic devices that were utilized in connection with, among 
other things, the taxi medallion transaction, Cohen’s consulting work, and 

Specifically, as described below. Subject Premises-1 likely contains evidence concerning Cohen’s 
taxi medallion loans, his negotiations with banks, his personal finances, his consulting work, his 
tax returns, and . as well as electronic devices containing such evidence, 

all of which constitute or contain evidence of the Subject Offenses. Additionally, as described 
below. Subject Premises-2 likely contains evidence relating to Cohen’s consulting work, his 
finances, and as well as electronic devices containing such evidence. 

Subject Premises-3, as described below, likely contains evidence relating to Cohen’s assets and 
finances, including assets that may not have been disclosed to banks in connection with the 
refinancing of Cohen’s taxi medallion debt or documents relating to such assets, and documents 
or evidence related to Subject Premises-4 likely contains electronic 
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devices, including Subject Device-1 and Subject Device-2, which themselves contain evidence of 
the Subject Offenses, including concerning Cohen’s taxi medallion loans, his negotiations with 
banks, his personal finances, his consulting work, his tax returns, and 

Accordingly, and as set forth in more detail below, there is probable cause to believe that the 
Subject Premises and Subject Devices will include evidence of the Subject Offenses. 

B. Probable Cause Regarding Subjects’ Commission of the Subject Offenses 7 

-The Bank Fraud Scheme— 

(i) Cohen’s Statements to Sterling National Bank 
16. As set forth in detail below, in 2014, Cohen, through LLCs controlled by him and 
his wife, Laura Cohen, entered into a series of loans from Sterling National Bank ( Sterling ) and 
the Melrose Credit Union (“Melrose”), secured by taxi medallions, for approximately $20 million. 
Though entered into by LLCs, the loans were also secured by personal guarantees in the names of 
both Cohen and his wife. Over time, as the taxi industry weakened and the medallions lost value, 
Cohen sought to renegotiate the terms of those loans and/or relieve himself from their obligations, 
including the personal guarantees. As part of that effort, Cohen made a series of representations 
to Sterling and Melrose about his net worth, assets, available cash and income, among other things. 
Specifically, based on my review of records maintained by Sterling and Melrose, and public 
sources concerning the taxi industry and the value of taxi medallions, as well as my participation 
in interviews with a Sterling executive vice-president (the “Sterling Employee-1”) and two other 


7 In the following recitation of probable cause, I frequently refer to phone calls or text messages 
involving Cohen. The text messages described herein as sent or received by Cohen were all sent 
or received from the telephone numbers associated with Subject Device-1 or Subject Device-2. 
The vast majority of the phone calls described herein made or received by Cohen were made or 
received by the telephone numbers associated with Subject Device-1 or Subject Device-2, although 
in certain limited instances Cohen used a landline or other phone. 
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Sterling employees (“Sterling Employee-2” and “Sterling Employee-3”), I have learned, among 
other things, the following: 

a. Taxi medallions are small metal plaques affixed to taxis. Without a medallion, it 
is illegal to operate a taxi in cities with medallion systems, such as New York City. Cohen and his 

fox'MwiiM' 

wife own multiple LLCs that collectively own 32 taxi medallions (each LLC owns two 
medallions). 8 Cohen’s purchase of these New York taxi medallions was originally financed by 
loans from Capital One bank, for which the medallions served as collateral-Cohenwas not a taxi- 
operator, and leased his medallions to a third party. That third party made monthly payments to 
Cohen, who in turn used some of those proceeds to make his monthly loan payments to Capital 
One. 

b. In early 2014, Cohen became a customer of Sterling when he sought to refinance a 
mortgage on a rental property that he owned. In or around April 2014, Cohen raised with Steiling 
the prospect of refinancing his taxi medallion loans, which were then at Capital One. By in or about 
September 2014, Cohen began negotiating a lending transaction with Sterling that would allow 
Cohen to pay off his loans at Capital One and borrow more money from the then-increase in value 
of the medallions. According to Sterling Employee-1, in 2014, prior to the recent upheaval in the 
taxi industry—as a result of the emergence of ride-sharing services, such as Uber—taxi medallion 
loans were viewed by banks and investors as safe, short term credits, as the market value of taxi 
medallions was consistently rising. Consequently, taxi medallion loans—like the loans held by 
Cohen—were frequently refinanced at increasing amounts as the value of the medallions rose. 
According to Sterling Employee-1, borrowers typically cashed out the increase in the loan amount 


8 One of these companies. Mad Dog Cab Corp., was jointly owned by Sondra Cohen, who I 
believe is Cohen’s mother. 
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and used the additional funds for other purposes. Cohen appeal’s to have followed this approach in 
2014, when he agreed to refinance his medallion loans for approximately $22 million, which— 
according to letters from Capital One in Sterling’s files—was greater than his previous debt at 
Capital One Bank ($21 million, of which $ 14.6 million was a line of credit to Cohen). This allowed 
Cohen to cash out the proceeds from the transaction, 

c. Based on my review of records maintained by Sterling, I have learned that on or 
-about December 8,2014, each of Cohen’s sixteen taxi medallion-LLCs entered into loan-agreements 

and promissory notes with Sterling for the principal sum of $1,375,000, with repayment due on 
December 8, 2016. Each loan was signed by Michael or Laura Cohen, depending on who was the 
sole shareholder of the LLC. The address listed for each of the LLCs was the address for Subject 
Premises-1. Hie loans were also each secured by a security agreement, dated the same day, making 
the medallions collateral for the notes. To give Sterling additional security, Michael and Laura 
Cohen signed personal guarantees and confessions of judgment, giving Sterling the right to pursue 
collection against the Cohens’ personal assets were their corporations to default under the loan 
agreements. The personal guaranty agreements stated that the LLCs had offices at the address for 
Subject Premises-1, and contained a notice provision that stated that any notices required by the 
agreements should be mailed to Subject Premises-1. In total. Sterling agreed to lend approximately 
$22 million to the Cohens’ companies. 

d. Pursuant to participation agr eements. Sterling transferred 45 percent of Cohen’s 
taxi medallion debt to Melrose. 1 ' 


9 Melrose, which had a business principally focused on taxi medallion loans, is now in 
conservatorship by the National Credit Union Administration (“NCUA”). 

13 
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e. In evaluating Cohen’s requested refinancing of the taxi medallions, Sterling (and 
Melrose, consistent with its participation in the deal) conducted due diligence. At Sterling s 
request, Cohen provided Sterling with a statement of financial condition, dated August 1, 2014 
(the “August 2014 Financial Statement”), which indicated that Cohen had $100,740,000 in total 
assets, $23,550,000 in total liabilities, and a net worth of $77,190,000." J From my review of a 
Sterling credit memorandum, dated September 29, 2014, I know that Sterling viewed the 
transaction favorably because, accounting for loan payments, cash flows from the medallions were - 
projected to be positive, the value of the collateral (as estimated by Sterling) exceeded $42 million, 
and the net worth of Cohen—who was the direct obligor under the guarantee agreements—was 
over $77 million. An internal Sterling credit and risk rating analysis report, dated October 20, 
2014, recommended approval of the loans for substantially the same reasons. 

f. Based on my review of records maintained by Sterling and public sources, I have 
learned that over time, the collateral backing Cohen’s loans (taxi medallions) lessened in value due 
to the rise in ride-sharing companies. Additionally, Cohen began falling behind on loan payments 
to Sterling and Melrose. I know from records maintained by Sterling and an interview with Sterling 
Employee-2 that, beginning in or around September 2015, Cohen told Sterling, in sum and 
substance, that the individual leasing Cohen’s medallions had fallen behind in making payments to 
Cohen, and that as a result, the monthly cash flow from his taxi medallions had been reduced, 
leaving him with a shortfall of approximately $16,000 each month. For instance, I have reviewed 
an email from Sterling Employee-2, dated September 9, 2015, summarizing a call with Cohen— 
which according to the email and toll records for Cohen’s cellphone occurred on September 8, 

10 Cohen subsequently provided Sterling with a revised statement of financial condition, also 
dated August 1,2014, which reported assets of $99,420,000, total liabilities of $23,550,000, and a 
net worth of $75,870,000. 
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2015_during which Cohen told Sterling Employee-2, in sum and substance, about his cash flow 

problems and a monthly shortfall of approximately $16,000. In feat same email, Sterling 
Einployee-2 commented that despite Cohen’s statements, his personal financial information 
“indicate^] a strong ability to make up the difference in payments.” Cohen, however, according 
to Sterling Employee-2, pushed the bank for a reduction in Cohen’s monthly payments. 

g. From my review of records maintained by Sterling and my participation in an 
" Interview "with Sterling Employee-2rf have learned-that Cohen and Sterling-Employee-2 spoke 
again on September 28, 2015, and that during the call Cohen stated, in sum and substance, that the 
individual to whom Cohen leases the medallions had again reduced monthly payments to Cohen. 1 
know fi-om my review of records maintained by Sterling that between in or about September 2015 
and November 2015, Sterling raised the possibility—both internally and wife Cohen—of Cohen 
posting his real estate holdings, personal residence, or some other collateral as additional security 
for the banks.' 1 According to these records, however, Cohen resisted these requests. From my 
review of loan documents and records maintained by Sterling, I know that m or about November 
2015, as a result of Cohen’s representation that he was not earning sufficient returns on his 
medallions to cover monthly interest payments. Sterling and Melrose agreed to amend their loans 
wife Cohen by, among other things, reducing the interest rate Cohen paid to Melrose and extendmg 

fee loan maturity date to December 8,2017. 

h. I know from interviews with Sterling Employee-1 and Sterling Employee-2, as well 

as emails 1 have reviewed, that in or about October 2016, Cohen told Sterling Employee-1 that 
Cohen had a potential buyer of his taxi medallions, named who would agree to 

” Based on my review of property records, I know that on or about October 28, 2015, aiound 
the time period when Sterling raised the possibility of Cohen posting his personal resiclence- 
Subject Premises-1—as collateral, Cohen transferred Subject Premises-1 into a trust. 

15 


2017 . 08.02 







Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 117 of 201 


assume Cohen’s debt with Sterling and Melrose. Based on my review of records maintained by 
Sterling, as well as the interviews with Sterling Employee-1 and Sterling Eraployee-2 referenced 
above, I know that by or before October 2016, Cohen had entered into negotiations to sell his sixteen 
corporate taxi medallion entities | 

for the balance of the loans, which at the time was $21,376,000. 1 know from my review of records 


maintained by Sterling, and my participation in an interview with Sterling Employee-2, that as a 


condition of the transfer of the medallion loans—and because Sterling was unfamiliar with 



II —Sterling requested that Cohen make a substantial principal payment on the loan, of 
approximately one million dollars, prior to the transfer. Cohen rejected this request initially. But 
on or about January 31,2017, Cohen told Sterling Employee-1, in sum and substance, that he would 
make a one million dollar principal reduction payment in order to move forward with the medallion 
transfer deal with Indeed, in an email sent by Cohen to Sterling Employee-2 on or 

about February 22, 2017, Cohen confirmed that he “agreed to pay down I million from the loan 


amount” 

i. Pursuant to the participation agreements between Sterling and Melrose, Sterling 

was required to secure Melrose’s agreement to participate in the transfer of the taxi medallion debt 
from Cohen to On or about April 17, 2017, Sterling sent a memorandum to 

Melrose summarizing the terms of the proposed transaction, and noting the requirement that 
Melrose agree to the terms. On or about May 2,2017, Sterling Employee-1 told 

that Melrose had agreed to the deal in principle, and that Sterling would be sending the parties a 
term sheet shortly. 

j. In order for the banks to conduct diligence and evaluate the proposed transaction 
fully, they requested financial information from the parties. On or about June 7, 2017, Steiling 
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Employee-1 emailed Cohen to request an “updated personal financial statement,” completed 
jointly with Cohen’s wife, and Cohen’s most recent federal income tax return. On or about June 
8,2017, Cohen emailed Sterling Employee-1 a Sterling personal financial statement form that had 
been filled out by hand, which referenced a statement of financial condition, dated May 1, 2017 
(the “May 2017 Financial Statement”) that was also attached. The May 2017 Financial Statement 
included a cover letter from Cohen’s accountant, stating, in sum and substance, that 

the information in the statement came from Cohen and thal lad not-confirmed-its accuracy 

or completeness. The May 2017 Financial Statement stated that Cohen had total assets of 
$41,955,000, total liabilities of $39,130,000, and a net worth of $2,825,000. The May 2017 
Financial Statement indicated that Cohen’s assets were comprised of $1,250,000 in cash, 
$26,155,000 in closely held companies (such as the taxi medallion entities and his real estate 
holdings), $3,200,000 in real estate investments, and his $11,000,000 personal residence. 12 

k. Based on my review of reports of law enforcement interviews of Sterling 
Employee-1,1 have learned that Sterling Employee-1 reviewed the May 2017 Financial Statement 
with Cohen to, among other things, verify its accuracy, and Sterling Employee-1 asked Cohen about 


specific line items on the financial statement, including the cash amount, value of medallions, and 
total liabilities. Cohen stated to Sterling Employee-1, in sum and substance, that the May 2017 
Financial Statement was accurate. 

1. On or about August 16, 2017, Sterling Employee-1 emailed Cohen and /| 


|, attaching a non-binding term sheet memorializing the potential transaction between 


12 Based on my review of Cohen’s financial statements, I know that the precipitous decline in 
assets from his 2014 financial statement to his 2017 financial statements can be explained 
primarily by reported depreciation in the value of Cohen s real estate assets and medallion 
investments. 
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Sterling, Melrose, Cohen, and The tenn sheet included a cover letter addressed 

to Cohen at Subject Premises-1. The parties negotiated the provisions of the term sheet and, on or 
about September 5, 2017, Sterling Eraployee-1 sent md Cohen a copy ° f the 

executed term sheet. According to the term sheet, would borrow $20,000,000 

from Sterling and Mehose, to be secured by the medallions that vas to acquire from 

Cohen. 

m. 'As part of the agreement, accordingto the term sheet, $ 1,265,913 in principal (which 
is what would remain after the $20,000,000 payment on the outstanding loan balance) would be 
repaid by Cohen and the two banks, with Cohen paying fifty percent and the banks dividing the 
remaining half of the balance. Based on my review of an internal Sterling credit memorandum, 
dated October 4,2017, the parties reached a preliminary agreement that Cohen would pay $632,956 
of the remaining $1,265,912 principal loan balance, and Sterling and Melrose would absorb 
$357,167 and $275,789, respectively, in the form of charge-offs. According to Sterling Employee- 
1, Sterling was willing to divide the repayment of the outstanding principal balance—despite its 
prior insistence that Cohen make a principal pay-down of at least one million dollars—because 
Cohen represented on a telephone call with Sterling Employee-1, in sum and substance, that he had 
insufficient liquidity to pay the full outstanding principal balance. As part of the agreement, Sterling 
and Melrose also agreed to relieve Cohen and his wife of the personal guarantees that they made 
on behalf of the LLCs. Thus, after completing the jj^J^Htransaction, Cohen would no longei 

have had any outstanding obligations to Sterling or Mehose. 

n. Based on my review of emails sent by Sterling employees, I have learned that 
because the transaction between the parties was subject to full credit underwriting by Sterling and 
Mehose (as well as Melrose’s regulators at NCUA), in August and September 2017, Sterling 
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required and requested additional financial statements and tax returns for Cohen and 
for its credit underwriting process. In response to Sterling’s requests, on or about Septembei 25, 
2017, Cohen emailed Sterling Employee-2 a copy of his 2016 tax return. The tax return listed 



Cohen’s mailing address as Subject Premises-1. Additionally, on or about October 5, 2017, Cohen 
re-sent Sterling Employee-2 a copy of his May 2017 Financial Statement. A day later, on October 


6, 2017, Cohen emailed Sterling Employee-2 a statement of financial condition, dated September 
30, 2017"(the “September2017 Financial Statement-)? - 

o. Like the May 2017 Financial Statement, the September 2017 Financial Statement 
included a cover letter from ^jj, Cohen’s accountant, stating, in sum and substance, that 

the information in the statement came from Cohen, and that lad not confirmed its accuracy 

or completeness. The September 2017 Financial Statement stated that Cohen had total assets of 
$33,430,000, total liabilities of $45,630,000, and a negative net worth of $12,200,000. |j Notably, 
unlike Cohen’s May 2017 Financial Statement, the September 2017 Financial Statement 
represented to Sterling that Cohen had a negative net worth. The September 2017 Financial 
Statement indicated that Cohen’s assets were comprised of $1,250,000 in cash, $17,630,000 in 
closely held companies (including the taxi medallion entities and his real estate holdings), 14 
$3,200,000 in real estate investments, and his $ 11,000,000 personal residence (which, for the first 


13 Based on my review of Cohen’s financial statements, 1 know that this further decline in 
assets can be explained primarily by reported depreciation in the value of Cohen’s real estate assets 
and medallion investments. 

14 Notably, the September 2017 Financial Statement valued each of Cohen’s thirty-two New 

York taxi medallions at approximately $180,187.50, which ^lsiderably less than the 
$650,000 valuation ascribed to each medallion in the Cohen- term sheet. 
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time, he indicated was held by a trust). 15 The September 2017 Financial Statement included assets 
and liabilities not held in Cohen’s name, such as various entities associated with his taxi medallions 
and some of his real estate investment entities. 

p. From my participation in an interview with Sterling Employee-2, and my review of 
records maintained by Sterling, 1 have also learned that around the time Cohen piovided Steiling 
with these financial statements—i.e., in or around September 2017 Cohen stopped paying 
monthly loan payments on his taxi medallion loans altogether. According to Sterling Employee- 
2, Cohen informed Sterling, in sum and substance, that he had insufficient funds to pay the monthly 
principal and interest payments on his medallion loans. By in or about Decembei 2017, Steiling 
and Melrose had not been paid approximately $276,937.92 in monthly principal and interest 
payments on the medallion loans. Based on Cohen's financial condition as conveyed in the 
September 2017 Financial Statement, and his delinquency in making payments to Sterling, among 
other things, the bank’s credit underwriting committee determined (and memorialized in a 
December 2017 memorandum) that the Cohen-’^^^| transaction was favorable for the bank 
- that is, that^^^^^l would be a better borrower than Cohen. 

q. On or about December 26, 2017, Sterling sent Cohen a demand letter requesting 
the immediate receipt of past-due loan payments. The demand letter was addressed to Cohen at 
Subject Premises-1. On December 29, 2017, Sterling sent Cohen a letter stating that he was in 
default under the loans between Sterling and Cohen’s medallion corporations. The notice of 
default was addressed to Cohen at Subject Premises-1. Cohen did not make an immediate payment 
on the loans, but instead sent an e-mail to Sterling Employee-1 on or about January 24, 2018, 

15 Based on my review of property records maintained by the City of New York, and my 
participation in an interview withl J f know that in 2015, Cohen transferred his residence to 
a trust. He did not disclose that transaction to or Sterling until in or about September 2017. 
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stating that during the closing of the Cohen-^^^^^^^| transaction, Cohen would “bring all 
payments up to date as well as deposit the payoff differential.” Cohen also requested by email on 
January 24, 2018, that at die closing of the Cohen- transaction, Sterling provide a letter 

stating that all of Cohen’s debts have been satisfied and that Cohen’s personal guarantees of the 
medallion loans had been terminated. 

r. The Cohen- transaction, however, did not close. On or about January 

29, 2018. the ' attorney emailed attorneys for Sterling and stated that “at this time 

there is no deal with Michael Cohen. Some of the numbers have changed and we are not prepared 
to go forward.” 

s. Based on my participation in the interview with Sterling Employee-2 and my 

review of records maintained by Sterling, 1 know that after the Cohen- ieal fell apart, 

Sterling assigned Cohen’s loans to Sterling Employee-3, who specializes in collecting on 
defaulting loans. From my participation in an interview with Sterling Employee-3, my review of 
telephone call notes taken by Sterling Employee-3, and my review of telephone records, T know 
that Sterling Employee-3 spoke several times to Cohen on or about January 30, 2018 about paying 
down and/or restructuring Cohen’s outstanding taxi medallion loans. On the calls, which in total 
lasted more than an hour, Cohen stated in sum and substance that he did not have more than 
$1,250,000 to pay toward the medallion loans. On the call, in the course of reviewing the failed 
Cohen- transaction. Sterling Employee-3 questioned Cohen about the price 

|vas to have paid for each medallion, and whether there was a side agreement between 
Cohen and j^. Cohen denied that there was any side agreement with 

t. On or about January 31, 2018, Cohen emailed Sterling Employee-3 and proposed 
paying $500,000 to bring the loans current and $750,000 to bring the principal balance to 
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$20,500,000. Cohen also suggested revised monthly interest payment amounts. The signature 
block on the email indicated that Cohen’s address was the address for Subject Premises-2. On oi 
about January 31, 2018, Sterling Employee-3 responded to Cohen and stated, in sum and 
substance, that Cohen would need to pay the entirety of the overdue payments and pay down the 
principal balance of the loan to $20,000,000 (in total, a payment of approximately $1,750,000), 
and would need to make larger monthly interest payments. 

u. On or about February 1,2018, Cohen emailed Sterling Employee-3 and proposed 
“[pjayment of $1.250m which ALL can be used to pay down principal, if [Sterling] will waive 
past due amounts,” but stated “I do NOT have more than the $ 1.250m.” (Emphasis in original.) 
Cohen also stated, in sum and substance, that he had insufficient financial resources to post 
additional collateral or pre-fund monthly payments. The signature block on the email indicated 
that Cohen’s address was the address for Subject Premises-2. Based on my participation in an 
interview with Sterling Employee-3, 1 have learned that since January 30, 2018, Sterling has 
continued to renegotiate the medallion loans with Cohen based on Cohen’s representations about 
]iis current financial position. In particular, according to Sterling Employee-3, Cohen and Sterling 
have an agreement in principal to restructure Cohen’s loans based in part of Cohen s agieement to 
make a principal payment of approximately $750,000, to make a payment of $500,000 to become 
current on interest payments, and to post $192,000 in cash collateral foi his futuie monthly 
payments on the loan. Cohen also agreed to pledge an interest he had in a property. Sterling 
Employee-3 has stated that had Cohen indicated he had more than $1,250,000 available to him, 
Sterling would have, among other things, negotiated for a larger reduction to the principal amount 
of the loan. 
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(ii) Cohen Made Material Misrepresentations About His Finances to Banks 

Cohen Concealed from Sterling and Melrose Cash Derived from Consulting Work 

17. As set forth in detail below, despite multiple written and oral representations by 
Cohen to Sterling (and, by extension, Melrose 16 ) that he had insufficient funds to pay down the 
principal balance of the medallion loans, make monthly interest payments, or pay past-due 
amounts, it appears that between 2016 and the present, Cohen opened and maintained bank 
accounts at First Republic Bank (“First Republic”),- and then received-millions of dollars, in 
consulting payments in these accounts, which he did not disclose to Sterling. Cohen set up these 
accounts and received these funds during the very period in which he made disclosures to Sterling 
about his personal finances (including his assets and liabilities) and his ability to make payments 
on the medallion loans. In these disclosures to Sterling—and despite being asked about these bank 
accounts by his accountant-—-Cohen misled the bank by claiming he had insufficient liquidity to 
satisfy his obligations or meet the bank’s demands, while withholding information about these 
ongoing revenue streams and liquid financial assets at First Republic. 

18. Specifically, based on my review of documents and bank records produced 
pursuant to a subpoena by First Republic, and my participation in and review of reports of 
interviews with a First Republic sales manager (“First Republic Employee-1 ”) and a First Republic 
senior managing director (“First Republic Empioyee-2”), I have learned, among other tilings, the 
following: 


16 Based on my review of a report of an interview conducted with an employee of Melrose, I 
have learned that, pursuant to the participation agreement between Sterling and Melrose, Cohen’s 
financial statements and other records in Sterling’s possession were forwarded to Melros^othat 
Melrose could make a determination as to whether to approve of the Cohen- | 
transaction. Based on my review of reports of interviews with Melros^mployees, 1 also Know 
that Cohen called employees at Melrose regarding the Cohen-^^^^^jj.ransaction. 
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a. Cohen and his wife have been customers of First Republic since approximately 
June 2011. Cohen controls several checking and loan accounts at First Republic, some in his own 
name and others in the names of corporate entities. According to First Republic s know-yout- 
customer records on Cohen, 17 his primary physical address is the address for Subject Premises-!. 

b. On or about October 26, 2016, in Manhattan, New York, Cohen opened a new 
checking account at First Republic in the name of Essential Consultants LLC (the Essential 
Consultants Account”). Coheh was the only authorized signatory on the account. According to 
account opening documents, the primary address for Essential Consultants LLC was the address 
for Subject Premises-1. When Cohen opened the Essential Consultants Account, First Republic 
Employee-1 conducted an in-person interview of Cohen. In response to a series of know-your- 
customer questions about the purpose of the account—the answers to which First Republic 
Employee-1 entered into a form 18 —Cohen stated, in sum and substance, that he was opening 
Essential Consultants as a real estate consulting company to collect fees for investment consulting 
work, and all of his consulting clients would be domestic individuals based in the United States. 
Cohen also stated, in sum and substance, that his purpose in setting up the account was to keep the 
revenue from his consulting business—which he said was not his main source of income—separate 
from his personal finances. As set forth below, there is probable cause to believe that Cohen’s 
statements about the intended purpose of the account and source of funds for the account were 
false. Specifically, as described below, the account was not intended to receive and does not 


17 Certain financial institutions are required to conduct such procedures pursuant to the Bank 
Secrecy Act and its implementing regulations. See 31 U.S.C. § 5318; 31 C.F.R. § 1020.220. 

18 First Republic Employee-1 fu st filled out the form on the day he interviewed Cohen, October 
26, 2016. On or about December 19, 2016, at the request of bank compliance personnel, Fiist 
Republic Employee-1 updated the form to add more detail about Cohen’s statements. 
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appear to have received—money in connection with veal estate consulting vvoik, in addition, the 
account has received substantial payments from foreign sources. 

c. I know from my review of First Republic bank records that were scheduled by an 
FBI forensic accountant that after Cohen opened the Essential Consultants Account, Cohen 
received payments into that account from foreign businesses and entities that do not reflect the 
stated client profile for the residential and commercial real-estate consulting services. Specifically, 
frommy review of the Essential Consultants-Account schedule and-publio-sources, I know the- 
following: 

i. Beginning on or about January 31, 2017, Cohen began receiving monthly 
payments of $83,333 into the Essential Consultants Account fr om an entity called Columbus Nova 
LLC. According to public sources, Columbus Nova is an investment management firm controlled 
by Renova Group, an industrial holding company based in Zurich, Switzerland that is controlled 
by Russian national Viktor Vekselberg. From January 2017 to August 2017, the Essential 
Consultants Account received seven payments totaling $583,332.98 from Columbus Nova LLC. 

ii. Beginning on or about April 5, 2017, the Essential Consultants Account 
began receiving payments from Novartis Investments, SARL, which 1 believe to be the in-house 
financial subsidiary of the Swiss pharmaceutical company Novartis International AG (“Novartis”). 
Between April 2017 and February 2018, the Essential Consultants Account received eleven wire 
payments from a Swiss bank account held in the name of Novartis, each in the amount of $99,980, 
for a total of $1,099,780. 

iii. Beginning in or about April 2017, the Essential Consultants Account started 
receiving wire payments from a bank account associated with the telecommunications company 
AT&T Inc. (“AT&T’). Specifically, on or about April 14, 2017, AT&T sent $100,000 to the 
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Essential Consultants Account and, from in or about June 2017 to in or about January 2018, the 
Essential Consultants Account received ten $50,000 payments from AT&T. In total, AT& f sent 

$600,000 to die Essential Consultants Account. 

iv. On or about May 10, 2017, June 9,2017, July 10, 2017, and November 27, 
2017, the Essential Consultants Account received four deposits in the amount $150,000 (totaling 
$600,000) from a bank account in South Korea. The account holder from which the money was 
sent is Korea Aerospace Industfies-Ltd. (“KAI”). KAI is a South Korea-based company that 
produces and sells fixed-wing aircraft, helicopter aircraft, and satellites to the United States 

Department of Defense, among other customers. 

v. On or about May 22, 2017, the Essential Consultants Account received a 
$150,000 deposit from an account at Kazkommertsbank, a Kazakhstani bank. The listed account 
holder at Kazkommertsbank was a second Kazakhstani bank named BTA Bank, AO. A message 
accompanying the wire payment indicated that the payment was a “monthly consulting tee as per 
Inv BTA-101 DD May 10, 2017 consulting agreement W/N DD 08 05 2017 CNTR W/NDD 
08/05/2017.” 

vi. In total, from on or about January 31,2017 to on or about February 1,2018, 
die Essential Consultants Account received approximately $3,033,112.98 in transfers and checks 
from the aforementioned entities. As of on or about January 10, 2018, the balance in the Essential 
Consultants Account was $1,369,474.23. Cohen’s withdrawals from the Essential Consultants 
account reveal that it was used for largely personal purposes, including to pay, among other things, 
American Express bills and fees from “die Core Club,” a private social club in New York. 

d. On or about April 4, 2017, Cohen opened another new checking account at First 
Republic, this one in the name of Michael D. Cohen & Associates, P.C. (the “MDC&A Account”). 
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Cohen was the only authorized signatory on the account. According to account opening 
documents, the primary address for MDC&A Account was the address tor Subject Premises-1. 
Among other things, the MDC&A Account received ten wire transfers and one check from an 
account in the name of Squire Patton Boggs, a law firm. As noted above, Subject Premises-2 is 
located inside the New York office of Squire Patton Boggs. In total, from on or about April 5, 
2017, to on or about January 2,2018, the MDC&A Account received $426,097.70 in deposits, and 
the balance in the-account as of January-2r2018, was $344;541.-35.- As discussed below,-Gohen 
never disclosed any of the balance in the Essential Consultants or MDC&A accounts to Steiling 
during the negotiations with respect to the transaction or the subsequent loan 

refinancing negotiations, including in his May 2017 Financial Statement and Septembei 2017 
Financial Statement. 

19. Based on my review of emails that were seized pursuant to the Cohen Email 
Warrants, and my review of reports of interviews with employees of AT&T and Novartis, it 
appears that the aforementioned payments to the Essential Consultants Account and MDC&A 
Account were for political consulting work, including consulting tor international clients on issues 
pending before the Tramp administration. Specifically, from ray review of emails from the Cohen 
Gmail Account, the Cohen MDCPC Account, and public sources, I have learned the following: 

a. On or about April 28, 2017, Cohen sent an email to an individual whom I believe 
is affiliated with KA1. In the email, Cohen attached a “Consulting Agreement” between KAI and 
Essential Consultants dated as of about May 1, 2017. The agreement indicates that Essential 
Consultants had the address of Subject Premises-2. The document indicates that Essential 
Consultants would render “consulting and advisory services, as requested” by KAI, and that KAI 
would pay Essential Consultants “a consulting fee of One Million Two Hundred Thousand 
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($1,200,000.00) US Dollars,” disbursed through eight $150,000 installments between May 2017 
and December 2017. I have also reviewed invoices in amounts of $150,000 that Cohen emailed 
to an individual whom I believe is affiliated with KAI. At the top of the invoices the address listed 

for Essential Consultants is the address for Subject Premises-2. 

b. On or about May 8, 2017, Cohen sent an email to an individual whom 1 believe is 

affiliated with BTA Bank. The signature block on Cohen’s email listed “Essential Consultants 

LLC” and “Michael D. Cbheir& A sso-ciates, PC” and provided the address for- Subject Premises- 

2. In the email, Cohen attached a document purporting to be a “Consulting Agreement ’ between 

BTA Bank and Essential Consultants dated as of about May 8,2017. The agreement indicates that | 

Essential Consultants had the address of Subject Premises-2. The document indicates that 

Essential Consultants would render “consulting and advisory services” to BTA Bank, and that 

BTA Bank would pay Essential Consultants “a consulting fee of One Million Eight Hundred 

Thousand ($1,800,000.00) US Dollars,” disbursed through monthly payments of $150,000. On or 

about May 10,2017, Cohen sent an email to an employee of BTA Bank, and attached to the email 

an invoice to BTA Bank in the name of Essential Consultants, with the address of Subject Premises- 

2. The invoice contemplated a $150,000 payment to Essential Consultants for a “monthly 

consulting fee.” 

c. On or about January 23, 2017, Cohen appears to have entered into a consulting 
agreement with AT&T, which contemplates that Essential Consultants “shall render consulting and 
advisory services to [AT&T]” and that AT&T would “advise [Essential Consultants] of those issues 
and matters with respect to which AT&T Services desires [Essential Consultants]^ assistance and 
advice.” The agreement indicates that Essential Consultants had the address of Subject Premises- 
1. The contract calls for AT&T “to pay the Consultant for his services ... a consulting fee of Fifty | 
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Thousand ($50,000) Dollars ... per month” Based on my review of reports of interviews with 
AT&T employees, I have learned that AT&T retained Cohen to consult on political issues, 
including net neutrality, the merger between AT&T and Time Warner, and tax reform. 

d. On or about March 1, 2017, Cohen appears to have entered into a contract between 
Novartis and Essential Consultants, which provides that Essential Consultants will "provide 
consulting and advisory services to Novartis on matters that relate to the repeal and replacement of 
the Affordable Care Act in the' USlffiTanr other issues mutually-agreeable to [Essential 
Consultants] and Novartis.” The contract provides for a “consulting fee of One Million Two 
Hundred Thousand ($1,200,000) US dollarsto be paid to Essential Consultants in equal monthly 
installments over the course of a year. Based on my review of reports of interviews with Novartis 
employees, I have learned that Novartis retained Cohen to provide political consulting services and 

to gain access to relevant policymakers in the Trump Administration. 

e. In or about February 2017, Cohen began negotiating the terms of a “strategic 
alliance” with Squire Patton Boggs. On or about March 4, 2017, Squire Patton Boggs emailed 
Cohen a “strategic alliance agreement.” Under the terms of the agreement, Cohen agreed to 
generate business for the law firm, and Squire Patton Boggs agreed to pay to Cohen “an annual 
strategic alliance fee of $500,000, payable in twelve (12) equal monthly installments.” Squire 
Patton Boggs also agreed to provide Cohen with “dedicated and segregated office space in [Squire 
Patton Boggs’s] New York and Washington D.C. offices, which office space shall be physically 
separate from [Squire Patton Boggs’s] offices and have locked doors and its own locked file 
cabinets.” On or about April 3, 2017, Squire Patton Boggs announced on its website that is had 
formed a “strategic alliance” with Michael D. Cohen & Associates and would “jointly represent 

clients.” 
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20. Despite the significant amount of money that Cohen received into the Essential 
Consultants Account and the MDC&A Account, and the cash balance in both accounts, Cohen did 
not disclose that information to Sterling or Melrose. Specifically, based on my review of documents 
provided by |T ] (as noted above, Cohen’s accountant at the time), my participation in an 
with and my and 1 

have learned the following: 

aT In or about May 2017, met- with Cohen at Subject Premises-2-At the- 

meeting, Cohen told in sum and substance, that he had set up a law practice called Michael 

D. Cohen & Associates P.C., and a consulting company called Essential Consultants LLC. Cohen 
told in sum and substance, that he expected to earn $75,000 per month in connection with 

his law practice, and that he expected gross revenues for the consulting business to be between live 
and six million dollars annually. 

b. In or about October 2017, if not earlier, ^^H vas prepays a P ersonal financial 
statement for Cohen. On or about October 6,2017, ^ sent an email to Cohen in which <| 
wrote that “[attached is a draft of the new PFS as of September 30, 2017” and attached a draft of 
the September 2017 Financial Statement. The draft statement reflected that as of September 30, 
2017, Cohen had only $1,250,000 in cash, total assets of approximately $33,430,000 (comprised of 
taxi medallion interests, real estate interests, and his personal residence and property), and liabilities 
of approximately $45,630,000, leaving him purportedly over $12 million in debt. In the same email, 
Questioned Cohen, in sum and substance, about the fact that the financial statement did not 
list any value associated with either the Essential Consultants Account or the MDC&A Account: 
u [w]e did not add any value for you[r] two operating entities - Michael D. Cohen & Associates 
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POC [sic] and Essential Consultants LLC. Please advise whether or not these should be disclosed 


and what value.” 

c. On or about October 6,2017, Cohen called 
on toll records for Cohen’s cellphone—and told 


\yy telephone—which is reflected 
in sum and substance, not to include 
Essential Consultants or MDC&A in the September 2017 Financial Statement because they had no 
value. On or about October 6, 2017, following the call with Cohen, using the Cohen 

Account; responded’to I email with the answer “fflooks good to me,” Cohen never-directed 


to make any changes to his cash position as listed in the September 2017 Financial 
Statement. In a letter dated October 6, 2017, addressed to Cohen stated, “I have reviewed 

the attached statement of financial condition and find it to be correct and consistent with the 
representations that I made to your firm. The attached is an accurate reflection of my assets, 
liabilities and net worth (deficit) as of September 30, 2017.” Attached to thaJ.Jeter was the 
September 2017 Financial Statement, which, as noted above, was then transmitted to Sterling in 
connection with the proposed taxi medallion transaction between Sterlmg, Cohen, and 1 

21. Based on my review of a report of an interview with Sterling Employee-l, I have 
learned that Cohen did not disclose his income stream from Essential Consultants to Sterling 
Employee-1 or, to his knowledge, anyone else at Sterling. According to Sterling Employee-1, 
knowledge of such an income stream would have affected Sterling’s demands durmg the 
negotiations, particularly with respect to the amount of a principal paydown of Cohen’s debt. 


rnhen 1 Inrlerstated His Available Cash 

22. In addition to withholding the existence of his Essential Consultants income from 
Sterling and Melrose, it appears that Cohen also substantially understated his available cash and 
cash equivalents in his financial disclosures. Specifically, I know from my review of tire September 
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2017 Financial Statement that Cohen provided to Sterling that Cohen represented that he had 
$1,250,000 in cash as of September 30, 2017. 1 also know that on or about January 30. 2018, in a 
telephone call with Sterling Employee-3, and on February 1, 2018, in an email to Sterling 
Employee-3, Cohen represented that he did not have more than $1,250,000 in cash. But, from my 
review of a summary of bank records that were scheduled by forensic accountants, 1 have learned 
that Cohen had approximately $5,000,000 in cash and cash equivalents as of September 30,2017. 
Additionally, as of FebruaryH, 2018, Cohen had approximately $6,000,000 in-cash and cash 
equivalents. Specifically, from my review of the account schedule and bank records, I have learned 

the following: 

a. Cohen has three checking and/or savings accounts at Capital One Bank, one of 
which is in his wife’s name. As of September 30, 2017, Cohen had $1,105,680.35 in his savings 
account, and $1,262,982.29 in total in the three accounts at Capital One Bank. As ot February 1, 

2018, Cohen had a total of $1,389,245.78 in these accounts. 

b. Cohen has three accounts at Morgan Stanley in his name. As of September 30, 
2017, the combined total in cash and cash equivalents in those three accounts was $1,270,600.41. 

As of February 1,2018, Cohen had $1,284,996.13 in these accounts. 

c. As of September 30,2017, Cohen had $260,689.18 in an account at Signature Bank. 

As of February 1,2018, Cohen had $261,517.55 in this account. 

d. In addition to the Essential Consultants Account and MDC&A Account at First 
Republic, Cohen also had two joint checking accounts with Laura Cohen at First Republic. In total, 
as of September 30, 2017, Cohen had at least $1,876,209.27 in total in his four accounts at First 
Republic. As of February 1,2018, Cohen had $3,332,992.95 in these accounts. 
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e. Cohen has an account at Bethpage Credit Union with $25,931.39 in it as of 
September 30,2017. 

f. As of September 30, 2017, Cohen had $17,542.54 in accounts at Sterling. 

g. Cohen has two accounts at TD Bank—one in his name and one held jointly with his 
wife. Cohen also has a safety deposit box at TD Bank—Subject Premises-3. The safety deposit 
box was opened on December 13, 2017 in the names of Michael and Laura Cohen. 

h—In total; as of September 30,-201-7 7 Cohen had at least $4,713,935.08 in his accounts 
at Capital One Bank, City National Bank, Signature Bank, Sterling Bank, Bethpage Credit Union, 
First Republic, and Morgan Stanley. As of February 1, 2018, Cohen had $6,268,732.59 in his 
accounts at Capital One Bank, City National Bank, Signature Bank, First Republic, and Morgan 
Stanley. 19 

23. Accordingly, based on the foregoing, it appears that Cohen’s written and oral 
representations to Sterling and Melrose that he did not have more than $1,250,000 were false, and 
that Cohen withheld information regarding approximately $5 million in funds from Sterling and 
Melrose in order to secure favorable terms in his renegotiation of his medallion loan. Based on 
my participation in an interview with Sterling Employee-2, and my review of reports of interviews 
with Sterling Employee-1 and two Melrose employees, it is my understanding that that Sterling 
and Melrose would view Cohen’s understating of his assets as material to its decision whether to 
renegotiate Cohen’s medallion loans and on what terms, or to its decision whether approve of the 
transfer of those loans to | 

19 Based on my review of the account schedules described above, I know that, as of the date of this 
affidavit, the account balances for TD Bank have not yet been included in the schedule for either 
date and the account balances for Sterling National Bank and Bethpage Credit Union have not yet 
been included in the schedule for February 1, 2018. Tlius, to the extent that these accounts have 
positive balances, Cohen’s total balances in fact were even higher on these dates. 
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Cohen Has Unreported Interest Income 

24. It appears that Cohen also hid from Sterling interest income that he was receiving in 
connection with a six million dollar loan he made to another individual. Specifically, I know from 
my review of the May 2017 Financial Statement and September 2017 Financial Statement that 
Cohen provided to Sterling that Cohen did not disclose that he had made a note receivable in the 
amount of approximately $6 million, or that he was earning approximately $60,000 per month in 
interest income in connection with that loan. But,-from-my review of a summary of bank records 
that were reviewed by another law enforcement agent, my review of property records and 
documents obtained pursuant to the Cohen Email Warrants, and my participation in an interview 
with have learned the following: 

a. Based on ray review of property records, I have learned that on or about March 12, 
Cohen agreed to (end ^^^^|^^^^^^^^^Ppproxiraately 

$2,000,000. 20 It appears that the promissory note was unsecured by any real property. On or about 
April 28, 2014, Cohen and amended the promissory note, and restructured the loan to 

increase the principal amount to approximately $5,000,000. Under the terms of the amended 

promissory note, the loan was secured by | apartment in |_ _| Flonda ‘ 0n 

or about April 8, 2015, Cohen and |restated the promissory note to increase die principal 

amount to $6,000,000. 21 

b. Based on my review of a copy of the restated note, which was obtained pursuant to 
the Cohen Email Warrants, I have learned that under the terms of the amended and restated 


20 1 learned from Getzel diat 


21 The note states that the loan is to 
jointly and severally. For ease of reference, I refer simply to “ 
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promissory note, Cohen’s loan to s an interest-only loan, and that the principal balance 

of the loan bears interest at an annua) rate of 12.25 percent. I also know that the amended and 
restated promissory note includes a schedule of payments that require to pay Cohen 

approximately $61,250 per month beginning in April 2015 and ending in April 2019. The note also 
requires thal^^^H epay the principal balance of $6,000,000 on April 28,2019. 

c. Based on my review of bank records, I have learned that, consistent with the terms 

of the amended and-restated promissory note T has made monthly payments of 

approximately $61,250 since April 2015. Specifically, based on my review of records maintained 
by Capital One Bank, I have learned that from April 2015 to October 2015, Cohen received checks 
from an entity totaling $61,250 per month, which he 

deposited into his personal bank account at Capital One Bank. 22 It appears from my review of bank 
records and public sources that the owner of 1 

From my review of records maintained by Capital One Bank, I have also learned that since October 
2015, Cohen has received checks from an entity called j totaling 

$61,250 per month, which he deposited into his personal bank account at Capital One Bank. It 
appears from my review of bank records and public sources that s also the owner of j\ 

In total, it appears that Cohen receives approximately $735,000 per year 
in interest payments from | 

d. Based on my review of Cohen’s May 2017 and September 2017 Financial 

Statements, my review of his 2015 and 2016 tax returns obtained via subpoena and fr om the Cohen 
Email Warrants, and my participation in an interview with I have learned that Cohen did 


22 In April 2015, Cohen received a pro-rated payment. For all months thereafter, the total payment 
equaled $61,250, but iften made the payment in multiple checks. 


2017 . 08.02 


35 


















Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 137 of 201 


not disclose this interest income he was receiving from Sterling or Melrose, or list it 

on his tax returns. I have also learned that while this interest income is taxable, Cohen did not tell 


| -his accountant—about the income, and 
began doing 


lonly learned about the income because he 


|taxes in 2017. 2 ’ 

25. Accordingly, based on the foregoing, it appears that Cohen’s representations to 

Sterling and Melrose that he did not have mote than $1,250,000 were false, and that Cohen 

in order to 


withheld information relating To the-interest income he is receiving from 
secure favorable terms in his renegotiation of his medallion loan. 

Cohen Had a Side Agree ment With 1 

26. As set forth in detail below, during the course of Cohen’s negotiations to sell his 


interest in taxi medallions and the associated debt to 


Cohen not only 


misrepresented his financial position to Sterling, but also failed to disclose a side agreement he 


had negotiated with 


it appears that 


[greed to pay an above-market price 
I Approximately 


for Cohen’s taxi cab medallions, and in exchange, Cohen agreed to pay 
$3.8 million in cash. Specifically, from my review of documents produced pursuant to a subpoena 
by Sterling, and my participation in interviews with Sterling Employee-1, Sterling Employee-2, 
and Sterling Employee-3,1 have learned, among other tilings, the following: 

a. On or about September 5, 2017, an executed terra sheet was circulated by Sterling 

I The term sheet listed Cohen’s address as the address foi 


Employee-1 to Cohen and 

Subject Premises-1. According to the term sheet, 
from Sterling and Melrose, to be secured by the medallions that 


|vould borrow $20,000,000 
was to acquire from 


23 Accordingly, this interest income-which should have been reported as such on Cohen’s tax 
returns—is included herein in calculations of Cohen’s true cash position. 
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Cohen. At a price of $20 million for thirty-two taxi medallions, the proposed transaction valued 
each medallion as worth $625,000. The term sheet also contemplated a $1,265,913 pay-down of 
the principal balance of the loan. The term sheet made no mention of a $3.8 million payment from 
Cohen to 1 -T:: "1 or any other form of payment or financial transaction between the parties. 

b. Additionally, an internal Sterling credit memorandum, dated October 4, 2017, 
describing the terms of the Cohen- ^^^(transaction and the new loan to 

not mention^ny payments fi-bm Cohen tolBB includin § a ^-million payment.- The 
memorandum also noted that the “loan amount of $20MM indicates a $625M purchase price per 
medallion” but “it is recognized that this is not in line with current market values.” Indeed, 
according to an internal Sterling memorandum dated February 5, 2018, m the month ot January 
2018, taxi medallions sold for amounts ranging from $120,000 to $372,000. According to Sterling 
Employee-1 and Sterling Employee-2, they were never told that ^^^^igreed to a purchase 
price of $625,000 in exchange for a lump sum payment from Cohen, or that Cohen would make 

any payment to ' | 

c. On or about January 30, 2018, Sterling Employee-3 asked Cohen whether Cohen 
had a side agreement with pay sum of money for entering into the 

medallion transaction. Sterling Employee-3 asked Cohen about such an arrangement because, 

according to Sterling Employee-3, the price that HB^s for eaCh 

appeared to be well above the market price. Cohen stated, in sum and substance, that he had no 

side agreement—and never had a side agreement with 

27. While Cohen and^^^^H did not disclose any payment from Cohen to 
communications with Sterling, it appears that such a payment was contemplated. 
Indeed, based on my review of records maintained by ^fland my participation in an interview 
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learned the following, in substance and in part, regarding the proposed side 


with 1 have 

payment from Cohen to I 

a. On or about September 19, 2017 -^| prepared a memorandum for Cohen 
entitled, “Sale of NYC Medallion Entities and Debt Assumption” (the “| Memorandum”). 
xhe ^^viemorandum summarized the proposed transaction between Cohen and 
in part, as follows: “Michael and Laura Cohen will transfer ownership of their 13 NYC medalhon 
entities to a Buyer wh^ill^ssume-their bank indebtedness, upon the [Cohens’] paying down the 
debt portfolio of the 13 entities by $500,000 and a cash payment to the Buyer of $3,800,000. m24 

b. According to ^^^Cohen told him the parameters of the deal, including the 

payment of $3,800,000 to {^H|butH»<* 1 ™ W where Cohen WaS g ° iDg * *** 

$3,800,000 to pay As noted above, Cohen had more than $5,000,000 in cash and 

cash equivalents as of September 2017, but had only disclosed in his September 2017 Financial 
Statement that he had $1.25 million in cash. 

28. Based on my review of records maintained by Sterling (as well as Melrose, the bank 
with the participating interest in the loans) and reports of interviews of representatives of Sterling 

(and Melrose), 1 have seen no 
involved in the potential deal with Cohen and 

side payment from Cohen tc | 

The Illegal Campaign Contribution Scheme 


evidence that Sterling, Melrose, or any other financial institution 

lyas aware of the planned $3.8 million 



24 The reference to thirteen medallions appears to be an error by | | 
together owned sixteen corporations, which in turn owned 32 taxi medallions. 
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C. Probable Cause Justifying Search of the Subject Premises and Subject Devices 


45. Based on the foregoing, my review of records produced pursuant to subpoenas and 
the Cohen Email Warrants, and the iCloud Warrant, and my training and experience, there is 
probable cause to believe that the Subject Premises and Subject Devices have been used in 
furtherance of the Subject Offenses and are likely to contain instrumentalities, evidence, and fiuits 
of the Subject Offenses. Specifically, there is probable cause to believe that Cohen permanently 

resides at Subject Premises-1 and, at least in part, works at both Subject Premises-l and Subject 

*!• • • • V * 1 * 1 0 § • 

Premises-2 and that those locations contain evidence relating to the Sterling taxi medallion 
transaction, Cohen’s assets, Cohen’s consulting work for Essential Consultants LLC, and his 
Additionally, there is probable cause to believe that Subject Premises-3 
contains evidence of Cohen’s assets and Finally, there is probable cause 

to believe that Subject Premises-4, in which Cohen is temporarily residing, contains electronic 
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devices, including Subject Device-1 and Subject Device-2, which, in turn, contain evidence of the 


Subject Offenses, such as evidence relating to the Sterling taxi medallion transaction, Cohen s 
assets, Cohen’s consulting work for Essential Consultants LLC, and | 

46. First, there is probable cause to believe that Cohen lives and operates his businesses, 
at least in part, at Subject Premises-1. Specifically, from my review of property records, I know 
that Michael Cohen and Laura Cohen own (in trust) Subject Premises-1. From my review of 


Cohen’s tax returns, 1 know he lists his primaryresidence as Subject Premises-! .-Additionally— 
from my review of emails produced pursuant to the Cohen Email Warrants, I know that Cohen 
routinely refers to Subject Premises-1 as his home. For example, on or about September 28, 2017 
and October 6, 2017, Cohen emailed individuals that his home address is the address for Subject 
Premises-1. I also know from my review of emails that Cohen receives package delivery 
notifications that list Cohen’s address as the address for Subject Premises-1. Cohen has also 
provided the address of Subject Premises-1 as the address for Essential Consultants and Michael 
D. Cohen & Associates, P.C. For example, the certificates of incorporation and account opening 
documents at First Republic for both entities list their addresses as the address for Subject 
Premises-1. See supra ^ 18(b), 18(d). The consulting agreement between Essential Consultants 
and AT&T also indicated the address for Essential Consultants is the address for Subject Premises- 


1. See supra ]| 19(c). 

47. There is also probable cause to believe that Subject Premises-1 is likely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. Specifically, from my review of 
emails produced pursuant to subpoena and die Cohen Email Warrants and iCloud Warrant, as well 


as my training and experience, I know the following: 
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a. According to records maintained by Sterling, the address for all ol Cohen s taxi 
medallion LLCs is the address for Subject Premises-1. See supra 1 16(c). Additionally, the 
medallion loan documents indicate that any mailings related to the loans should be sent to Subject 
Premises-1. See id Based on my training and experience, as well as my review of public sources, 

1 know that individuals keep records of properties and assets in which they have ownership 
interests. Accordingly, I submit that Subject Premises-1 likely contains evidence of Cohen’s 
ownership of the taxi“medallioTT LLCs; the'revenue that those medallions generate, and the- 
transaction with Sterling in 2014 to re-finance the medallion loans that were then with Capital One 


Bank. 


b. From my review of records maintained by Sterling, 1 also know that Sterling 


addressed documents relating to the | 


transaction and Cohen’s attempts to modify the 


terms of the medallion loans to Subject Preraises-1. For instance, Sterling addressed the 
transaction term sheet, see supra 1 16(1), and its demand letter and notice of default, see supra 1 
1 6(q), to Subject Premises-1. Accordingly, Subject Premises-1 likely contams evrdence 

concerning the jxansaction and Cohen’s negotiations with Sterling. Some ol those 

I —were concealed from 


records—such as records relating to a payment from Cohen to 
Sterling and cannot be obtained via subpoena to Sterling. Additionally, even where documents 
were sent to Cohen by Sterling (and therefore are available from Sterling via subpoena), the fact 
that they may be found in Subject Premises-1 will be relevant to Cohen’s possession or knowledge 


of the documents. 

c. From my review of records maintained by First Republic, l know that Cohen 
provided the address for Subject Premises-1 as the mailing addresses for the Essential Consultants 
Account and MDC&A Account. See supra HI 18(b), 18(e). Accordingly, it is likely that Subject 
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Premises-1 contains records relating to the Essential Consultants Account and MDC&A Account, 
including, among other things, account opening documents, bank statements, documents provided 
as part of the know-your-customer process, any notes made by Cohen when he was opening the 
accounts, wire transfer records, and canceled checks. Even where these records can be obtained 
from First Republic, the fact that they may be found in Subject Premises-1 will be relevant to, 
among other things, Cohen’s ownership of the accounts, or his knowledge of transactions or the 

existence of funds in accounts. 

d. Based on my review of records maintained by Capital One Bank, TD Bank, Morgan 
Stanley, City National Bank, Signature Bank, and Bethpage Credit Union, I know that Cohen 
provided the address for Subject Premises-1 as the mailing for his accounts at each of these 
financial institutions. Accordingly, it is likely that Subject Premises-1 contains records relating to 
these accounts, including, among other things, bank statements that list account balances. The 
existence of these records in Subject Premises-1 wiU be relevant to, among other things, Cohen’s 
ownership of the accounts and his knowledge of the balances in these accounts. 

e. Additionally, Cohen may have records of other bank accounts or assets that weie 
not disclosed to Sterling and are not presently known by law enforcement. For example, as 
described above, Cohen has received interest income since 2015 that he has not disclosed to 
Sterling or paid taxes on. Also, on Cohen’s August 2014 Financial Statement, jee supra 116(e), 
he disclosed $10,000,000 in “investments in overseas entities.” 30 The value of these investments 
was omitted from subsequent financial statements. However, for the reasons outlined above, there 
is probable cause to believe that Cohen omitted the value of those investments from his 2017 


30 Based on my participation in an interview with Sterling Employee-3, l have learned that 
Cohen told Sterling Employee-3 that the reference to “investments m overseas entities on us 
2014 Financial Statement was to serve merely as a “placeholder” for potential future investments. 
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financial statements in order to understate his assets. As Subject Premises-1 is Cohen’s primary 
residence and he uses Subject Premises-1 as the mailing address for bank records, there is probable 
cause to believe that account statements for unknown bank accounts or assets concealed from 

Sterling are likely to be found in Subject Premises-1. 

f. Based on my review of records maintained by AT&T and produced pursuant to the 

Cohen Email Warrants, l know that the address Cohen provided to AT&T for Essential Consultants 
listheaddress for Subject Premises-1. See^upmV^%c): Therefore, there is probable cause-to - 
believe that Subject Premises-1 will contain evidence concerning the operation ot Essential 
Consultants or money that Cohen received, through Essential Consultants, from AT&T. 
Additionally, because Cohen used the address for Subject Premises-1 for at least one consulting 
arrangement involving Essential Consultants, there is probable cause to believe that Subject 
Premises-1 may contain records of other consulting arrangements that Cohen, through Essential 

Consultants, has with other individuals or entities. 

g. Based on my review of records maintained by iccounting firm, and emails 

produced pursuant to the Cohen Email Warrants, I have learned that '^^J^counting firm sent 
documents to Subject Premises-1 and used the address for Subject Premises-1 as the address listed 
on Cohen’s personal and corporate tax returns. See supra 1 16(n). For instance, on or about 
October 6, 2017, an employee accounting firm emailed Cohen that she had sent 

Cohen’s September 2017 Financial Statement by FedEx to Cohen’s attention. Accordingly. 
Cohen’s tax records are likely to be found in Subject Premises-1. 


h. Based on my review of bank records and publicly-available documents, I know that 
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i. Based on my review of emails produced pursuant to the Cohen Email Warrants and 
iCloud Warrant, 1 know that Cohen used at least one Apple iPhone, an Apple iPad Mini, and a 


MacBoolc Pro to access his iCloud account Based on thy review of location records provided by 
Apple pursuant to the iCloud Warrant, l know that electronic devices linked to Cohen’s iCloud 
account were used at Subject Premises-1 to, among other things, place telephone calls and backup 
Ales to Cohen’s iCloud account. Accordingly, there is probable cause to believe that Subject 
Premises-1 contains electronic devices, including certain Apple products, that lor reasons 

discussed below are likely to contain evidence of the Subject Offenses. 

j. Based on my review of emails produced pursuant to the Cohen Email Warrants, I 

understand that Subject Premises-1 recently sustained water damage to certain parts of the 
premises, and that Cohen has engaged contractors to perform certain remediation work on the 
premises. In addition, as set forth above, I believe that Cohen and his family are temporarily 
residing at Subject Premises-4 in the Loew’s Regency Hotel, which is approximately two blocks 
from Subject Premises-1. However, based on my review of a work order sent to Cohen’s email 
by a contractor, I understand that the first phase of the work order called for the contractor to "Pack 
& Remove all items & furnishings in Living Room, Kitchen, Sons Room & Dining Room” and 
store them off-site, hi addition, based on my review of drawings sent to Cohen by the contractor, 
it appears that the work is primarily being done in these rooms. Thus, 1 believe that the 
construction - to the extent it is still ongoing - would not necessarily have caused Cohen to move 
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all documents or evidence responsive to the warrant out ot Subject Premises-1, because it does not 
appear that work is being done to the portion of Subject Premises-1, such as a home office or 
Cohen’s own room, where such documents or evidence would most likely be found. 31 

48. Second, there is probable cause to believe that Cohen uses Subject Premises-2 as 
office space, and also that Subject Premises-2 contains certain electronic devices. Specifically, 
from my review of the “strategic alliance agreement” between Squire Patton Boggs and Cohen, 
and my review of the press release on Squire PattonBoggss website, I know that Cohen has an 
office at Subject Premises-2. See supra 18(d), 19(e). Indeed, I have learned that pursuant to 
Cohen’s agreement with the law firm, he has “dedicated and segregated office space in Squiie 
Patton Boggs’s offices on the 23rd floor of 30 Rockefeller Plaza, and that the space is “physically 
separate” from the firm’s offices and has “locked doors and its own locked file cabinets. See 
supra *[} 19(e). Additionally, I know that under the terms of the agreement, Cohen agreed to 
“arrange for [his] own computer server system that is not connected to [Squire Patton Boggs’s] 
computer network system.” I know from my participation in an interview with ^^^who me * 
Cohen at Subject Premises-2 in 2017, that Subject Premises-2 is an office with a door, it appears 
to be used only by Cohen, and it contains, among other things, a computer and paper files. 
According to when saw Cohen at Subject Premises-2, he had two cellular 

telephones in Subject Premises-2. I also know from my review of emails produced pursuant to tire 
Cohen Email Warrants that Cohen uses the address for Subject Premises-2 in the signature block 

31 As noted below, based on my training and experience, I believe that individuals who travel or 
stay in hotels for short-term periods commonly bring some items with them, such as portable 
electronic devices or sensitive items, meaning that Cohen has likely taken some evidence from 
Subject Premises-1 to Subject Premises-4. Nevertheless, given the temporary nature of Cohen’s 
stay at Subject Premises-4 and the scope of the work being done at Subject Premises-1,1 believe 
it is unlikely that Cohen has taken all evidence that would be subject to seizure out of Subject 
Premises-1. 
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on his emails. Based on my review of notes of a call between Cohen and First Republic Employee- 
2 (which notes were taken by another First Republic employee, who was participating in the call 
and taking notes), I know that, on or about November 15, 2017, Cohen told First Republic 
Employee-2 that he had a new office at 30 Rock. Moreover, I know from an article in Vanity Fair 
published on or about February 14, 2018, that Cohen was interviewed by the magazine in Subject 
Premises-2 in or about February 2018. 

49. There is also probable cause to believe that Subject Premises-2 isiikely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. Specifically, from my review of 
emails produced pursuant to subpoena and the Cohen Email Warrants and iCloud Warrant, as well 
as my training and experience, I know the following: 

a. According to records maintained by Sterling, when Cohen was emailing with 
Sterling Employee-3 in 2018 about a modification to his existing loan from Sterling, Cohen listed 
his address in his email as the address for Subject Premises-2. See supra 1j 16(t), 16(u). 
Accordingly, Subject Premises-2 likely contains evidence concerning Cohen’s loan modification 
negotiations with Sterling. 

b. Based on my review of records obtained pursuant to the Cohen Email Warrants, 1 
know that the address Cohen provided to KA1 and BTA for Essential Consultants is the address 
for Subject Premises-2. See supra fl 19(a), 19(b). Therefore, there is probable cause fo believe 
that Subject Premises-2 will contain evidence concerning the operation of Essential Consultants 
or money that Cohen received, through Essential Consultants, from KAI and BTA, among other 
entities with which Cohen had a consulting arrangement. Additionally, based on my review of 
emails sent in 2018 that were obtained pursuant to the Cohen Email Warrants, I know that Cohen 
continues to enter into consulting arrangements through Essential Consultants, and agreements 
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relating to those arrangements indicate that Essential Consultants is located at Subject Premises- 
2. Additionally, because Cohen used the address for Subject Premises-2 for multiple consulting 
arrangements involving Essential Consultants, there is probable cause to believe that Subject 
Premises-2 may contain records of other unknown consulting arrangements that Cohen has with 

other individuals or entities. 

c. Based on my review of records maintained by | ^^Jiccounting firm, and emails 
produced pursuant to the Cohen Email Warrarts, as well as my participation in an interview with 
HHgy L have learned that j^Jvisited Subject Premises-2 to meet with Cohen about his taxes. 
See supra 120(a). At that meeting, ^jiiscussed with Cohen whether Cohen should disclose 
Essential Consultants on his personal financial statement to banks. According, there is probable 
cause to believe that Subject Premises-2 will contain evidence relating to Cohen’s taxes, or notes 
of his conversation with Moreover, the fact that Cohen used Subject Premises-2 for a 

meeting regarding his personal financial matters provides probable cause to believe that documents 
and information regarding his finances will be found in Subject Premises-2. 

d. Based on my participation in an interview with I know that Cohen maintains 

a computer in Subject Premises-2. From my review of IP data produced pursuant to a subpoena 
and pen register to Google, it appears that Cohen is logging into his Gmail account from Subject 
Premises-2. Accordingly, there is probable cause to believe that Subject Prenuses-2 contains 
electronic devices, that for reasons discussed below are likely to contain evidence of the Subject 

Offenses. 

e. Based upon ray training and experience, I have learned that individuals who 
maintain businesses typically keep records relating to the business-such as contracts with clients 
and records of payments—at the business’ identified location. 1 am not aware of any addresses 
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r 

associated with Essential Consultants other than Subject Premises-1 and Subject Preinises-2. 

Accordingly, there is probable cause to believe that Subject Premises-1 and Subject Premises-2 
will contain business records for Essential Consultants. 

50. Third, there is probable cause to believe that Subject Premises-3 is likely to contain 
instrumentalities, evidence, and fruits of the Subject Offenses. In particular: 

a. As noted above, Cohen has two bank accounts at TD Bank. In or about November 

r 

2017, as Cohen was receiving substantial income fromcbnsultirig work—which he did not disclose 
to Sterling—Cohen opened the safety deposit box at TD Bank, which is Subject Premises-3. In 
light of the aforementioned evidence that Cohen conceals assets, including assets at TD Bank, 
there is probable cause to believe that Subject Premises-3 contains financial assets, objects of value 
and/or documents relating to such assets or objects of value that Cohen likely did not disclose to 
Sterling. Indeed, based on my training and experience, I am aware that people often conceal 
valuable items in safety deposit boxes. Accordingly, there is probable cause to believe that Subject 
Premises-3 will contain evidence of the Bank Fraud Offenses. 
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51. Based on my review of emails obtained pursuant to the Cohen Email Warrants and 


cell phone location information, I believe that Cohen is temporarily residing in Subject Premises- 
4. See supra ff 3(d). There is also probable cause to believe that Subject Premises-4 contains 


instrumentalities and evidence of the Subject Offenses, including, the following: 



33 As noted above. Subject Premises-3 is approxunately five inches by ten inches. Accordingly, I 
do not believe that it would fit a large volume of hard copy documents; however, a small number 
of hard-copy documents, or a large volume of documents contained on a flash drive or other 
portable storage device, would fit in Subject Premises-3. 
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b. As described above, at the time Cohen moved to Subject Premises-4, he was also 
in the midst of ongoing negotiations with Sterling regarding the refinancing of his medallion debts. 
For example, on January 30,2018, Cohen had a lengthy phone call with Sterling Employee-3 about 
his finances and the proposed restructuring, and on February 1, 2018, Cohen sent an email to 
Sterling Employee-3 claiming that he did not have more than $1.25 million in cash. See supra 

16(u). Thus, there is probable cause that Cohen took at least some documents and evidence relating 
to his ongoing negotiations with Sterling with him to SubjecFPremises-4, in order to reference and 
consult them in connection with these negotiations. 

c. As described above, Cohen used at least one Apple iPhone, an Apple iPad Mini, 
and a MacBook Pro to access his iCloud account, and these electronic devices linked to Cohen’s 
iCloud account were used at Subject Premises-1 - Cohens’ permanent residence - to place 
telephone calls and backup files to Cohen’s iCloud account. See supra It 47(i). Although Cohen’s 
stay at Subject Premises-4 is temporary, based on my training and experience I know that 
individuals who travel or stay in hotels for short-term periods commonly bring portable electronic 
devices with them, such as cellular phones, tablets, or laptops. Accordingly, there is probable 
cause to believe that Subject Premises-4, where Cohen currently appears to be residing, contains 
electronic devices, including Subject Device-1, Subject Device-2, and/or certain Apple products, 
that for the reasons discussed herein are likely to contain evidence of the Subject Offenses. 

d. Moreover, as set forth above, based on cellphone location information I know that 
Subject Device-1 and Subject Device-2 were in the vicinity of Subject Premises-4 as recently as 
this morning (April 8, 2018). As set forth above, there is probable cause to believe that Cohen 
used the Subject Devices in furtherance of tire Subject Offenses, including to communicate with 
Sterling employees regarding the medallion transaction, with First Republic employees regarding 


I 


2017.08.02 


68 







Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 170 of 201 


the Essential Consultants Account, with his accountant regarding his finances, and with 

52. Although Cohen appeal's to be residing currently b Subject Premises-4, it is 
unknown whether Cohen will be physically present within Subject Premises-4 at the moment the 
warrant sought herein are executed. If Cohen is within Subject Premises-4 at that moment, Subject 
Device-1 and Subject Device-2 - his cellphones - will likely also be within Subject Premises-4. 

If Cohen isnotwithin Subject Premised that moment, the Wt«*will likely be on his person— 
wherever he is located (which, based on location data for Subject Device-1 and Subject Device-2 
as recently as today, is likely to be in the Southern District of New York). As such, this warrant 
seeks separate authority to seize Subject Device-1 and Subject Device-2, in the event that those 
devices are not located withb Subject Premises-4 (or another Subject Premises) at the moment the 

warrants sought hereb are executed. 

D. Probable Cause Justifying Search of ESI 

53. Based on the foregoing, there is probable cause to believe that Subject Premises-1, 

Subject Premises-2 and Subject Premises-4 contain electronic devices that are likely to contain 
evidence, fruits, and instrumentalities of the Subject Offenses (and, as set forth above, that Subject 
Device-1 and Subject Device-2 are themselves electronic devices that are likely to contain 
evidence of the Subject Offenses). Specifically, based on my review of information produced 
pursuant to the Cohen Email Warrants, the iCloud Warrant, and subpoenas, as well as pen register 
data, 1 submit that there is probable cause that Subject Premises-1 contains an Apple iPad Mini, a 
MacBook Pro, and has, at various times, contabed Apple cellphones; similarly, there is probable 
cause that Subject Premises-2 contains a computer and has, at various times, contained Apple 
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cellphones. These devices are likely to include evidence, fruits, and instrumentalities of the 
Subject Offenses for the following reasons: 

a. As described throughout this affidavit, Cohen used email to send and receive 

communications related to the Subject Offenses. In particular, Cohen used email to send and 
receive communications with Sterling, First Republic. the entities to which he is providing 

consulting services among others. While some of these emails have 

already been obtained via subpoenas and search warrants, I know from my training and experience 
that individuals can and do delete emails from their Internet-based inboxes but retain copies of 
those emails on their hard drives. I also know that individuals often have multiple email accounts, 
some of which may not be known to law enforcement, and as a result electronic devices can be a 
unique repository of all emails relevant to certain Subject Offenses. Indeed, from my involvement 
in this investigation, 11 enow that Cohen had an email account with the Trump Organization, but 
the USAO and FBI have not been able to obtain the contents of that account to date. Thus, emails 
relevant to the Subject Offenses are likely stored on electronic devices in Subject Premises-1, 
Subject Premises-2 and/or Subject Premises-4. 

b. Additionally, Subject Premises-1, Subject Premise-2 and Subject Premises-4 likely 
contain electronic copies of documents relevant to the Subject Offenses. Indeed, I know from my 
training and experience that individuals often retain copies of important documents on their 
computers or other electronic devices capable of storing information, including cellphones (such 
as the Subject Devices) and tablets. Here, there are a number of documents that Cohen has likely 
retained that will be relevant to the Subject Offenses. For example, electronic devices may include 
documentation of Cohen’s true net worth, a listing of his assets, an accounting of his available 
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cash, consulting agreements with third parties, and . 

among other evidence of the Subject Offenses. 

c. Third, I know from my review of emails obtained pursuant to the Cohen Email 

Warrants that Cohen sent up online banking with First Republic. Based on my training and 
experience, 1 know that individuals who set up online banking often receive electronic notices 
concerning financial transactions and, on occasion, save records of their financial transactions to 
their devices. Accordingly, there is probable cause to Believelhat Cohen’s electronic devices 
contain evidence of banking activity, including the existence of bank accounts or assets that Cohen 
did not disclose to Sterling or Melrose. 

d. Fourth, from my review of records produced by Apple, I know that Cohen 
communicates using text message as well as encrypted communications applications. These 
applications that Cohen has downloaded onto a phone include, but are not limited to, WhatsApp, 
Signal, and Dust. I know from my review of toll records and text messages that, in particular, 
Cohen communicated with ^^Jising these encrypted applications. Accordingly, there is 
probable cause to believe that Cohen’s cellphones - the Subject Devices - will contain encrypted 
messages that are not otherwise accessible relating to the Subject Ottenses. 

54. Based on my training and experience, I know that individuals who engage in 
financial crimes commonly use computers to communicate with co-conspirators, keep financial 
ledgers, and retain fraudulent documents. As a result, they often store data on their computers 
related to their illegal activity, which can include logs of online or cellphone-based chats with 
co-conspirators; email correspondence; contact information of co-conspirators, including 
telephone numbers, email addresses, and identifiers for instant messaging and social medial 
accounts; bank account numbers; and/or records of uses of funds. 
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55. Based on my training and experience, I also know that, where computers are used 
in furtherance of criminal activity, evidence of the criminal activity can often be found months or 
even years after it occurred. This is typically true because: 

• Electronic files can be stored on a hard drive for years at little or no cost and users thus 
have little incentive to delete data that may be useful to consult in the future, 

• Even when a user does choose to delete data, the data can often be recovered months 
or years later with the appropriate forensic tools. When a tile is “deleted” on a home 
computer, the data contained in the file does not actually disappear, but instead remains 
on the hard drive, in “slack space,” until it is overwritten by new data that cannot be 
stored elsewhere on the computer. Similarly, files that have been viewed on the Internet 
are generally downloaded into a temporary Internet directory or “cache,” which is only 
overwritten as the “cache” fills up and is replaced with more recently viewed Internet 
pages. Thus, the ability to retrieve from a hard drive or other electronic storage media 
depends less on when the file was created or viewed than on a particular user’s 
operating system, storage capacity, and computer habits. 

• In the event that a user changes computers, the user will typically transfer files from 
the old computer to the new computer, so as not to lose data. In addition, users often 
keep backups of their data on electronic storage media such as thumb drives, flash 
memory cards, CD-ROMs, or portable hard drives. 

56. Based on the foregoing, I respectfully submit there is probable cause to believe that 
Cohen engaged in the Subject Offenses, and that evidence of this criminal activity is likely to be 
found in the Subject Premises, on computers and electronic media found in the Subject Premises, 
and on the Subject Devices. In particular, there is probable cause to believe that the Subject 
Premises and Subject Devices will contain evidence, fruits, and instrumentalities of violations of 
the Subject Offenses, as more fully described in Section II of Attachments A, B, C, D, E and F to 
the proposed warrants, including the following: 

a. Evidence necessary to establish the occupancy or ownership of die Subject 
Premises, including without limitation, utility and telephone bills, mail envelopes, addressed 
correspondence, bank statements, identification documents, and keys. 

b. Evidence relating to Sterling, Melrose, and/or taxi medallions. 
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c. Evidence relating to a plan, proposal, or agreement for Cohen and/or entities 
associated with him to transfer any interest in taxi medallions, and any associated debts or 


liabilities, to others, including to 


nd/or entities associated with him. 


d. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

e. Evidence relating to Essential Consultants, LLC, including any documents that 


indicate the nature^nd purpose copayments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

f. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

g. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records. 

h. Evidence relating to agreements, loans, and/or financial transactions between 


Cohen and 


and any payments by 


o Cohen. 
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relating to Cohen’s bank accounts, taxes, debts, and/or finances: 

q. Communications, records, documents, and other files leflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, 

r. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

III. Procedures for Searching ESI 
A. Execution of Warrant for ESI 

57. Federal Rule of Criminal Procedure 41(e)(2)(B) provides that a warrant to search 

for and seize property “may authorize the seizure of electronic storage media or the seizure or 
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copying of electronically stored information ... for later review.” Consistent with Rule 41, this 
application requests authorization to seize any computer devices and storage media and transport 
them to an appropriate law enforcement facility for review. This is typically necessary for a numbei 
of reasons: 

• First, the volume of data on computer devices and storage media is often impractical 
for law enforcement personnel to review in its entirety at the seaich location. 

• Second, because computer data is particularly vulnerable to inadvertent or intentional 
modification or destruction, computer devices are ideally examined in a controlled 
environment, such as a law enforcement laboratory, where trained personnel, using 
specialized software, can make a forensic copy of the storage media that can be 
subsequently reviewed in a manner that does not change the underlying data. 

• Third, there are so many types of computer hardware and software in use today that it 
can be impossible to bring to the search site all of the necessary technical manuals and 
specialized personnel and equipment potentially required to safely access the 
underlying computer data. 

• Fourth, many factors can complicate and prolong recovery of data from a computer 
device, including the increasingly common use of passwords, encryption, or othei 
features or configurations designed to protect or conceal data on the computer, which 
often take considerable time and resources for forensic personnel to detect and resolve. 

58. As discussed herein. Squire Patton Boggs is a functioning law fiim that conducts 
legitimate business unrelated to Cohen’s commission of the Subject Offenses. Subject Premises- 
2 is an office located inside of Squire Patton Boggs’s New York office. In order to execute the 
warrant in the most reasonable fashion, law enforcement personnel will attempt to investigate on 
the scene of what computers or storage media, if any, must be seized or copied, and what computers 
or storage media need not be seized or copied. Law enforcement personnel will speak with Squire 
Patton Boggs personnel on the scene as may be appropriate to determine which files and electronic 
devices within Subject Premises-2 belong to or were used by Cohen. While, based on the 
foregoing, it does not appear that Cohen shared electronic devices or a server with Squire Patton 
Boggs, where appropriate, law enforcement personnel will copy data, rather than physically seize 
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computers, to reduce the extent of any disruption of Squire Patton Boggs's operations. If, after 
inspecting the seized computers off-site, it is determined that some or all of this equipment is no 
longer necessary to retrieve and preserve the evidence, the Government will return it. 

59. Additionally, because Cohen is an attorney, and claims to serve as a personal 
attorney for Trump, the review of evidence seized from the Subject Premises and Subject Devices 
wiU be conducted pursuant to established screening procedures to ensure that the law enforcement 
personnel involved In the investigation; mcludirti aftoFfiiys for the Government, collect evidence - 
in a manner reasonably designed to protect any attorney-client or other applicable privilege. When 
appropriate, the procedures will include use of a designated “filter team,” separate and apart from 
the investigative team, in order to review potentially privileged communications and detetmine 
which communications to release to the investigation and prosecution team. 

B. Accessing ESI on the Subject Devices 

60. As described above, the Subject Devices are both Apple brand devices. 

61. I know from my training and experience, as well as from infomtation found in 
publicly available materials including those published by Apple, that some models of Apple 
devices such as iPhones and iPads offer their users the ability to unlock the device via the use of a 
fingerprint or thumbprint (collectively, “fingerprint”) in lieu of a numeric or alphanumeric 
passcode or password. This feature is called Touch ID. I also know that the Apple iPhone X offers 
its users the ability to unlock the device via the use of facial recognition (through infrared and 
visible light scans) in lieu of a numeric or alphanumeric passcode or password. This feature is 

called Face ID. 

62. If a user enables Touch ID on a given Apple device, he or she can register up to 5 
fingerprints that can be used to unlock that device. The user can then use any of the registered 
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fingerprints to unlock the device by pressing the relevant fmger(s) to the device’s Touch ID sensor, 
which is found in the round button (often referred to as the “home” button) found at the bottom 
center of the front of the device. If a user enables Face ID on a given Apple device, he or she can 
unlock the device by raising the iPhone to his or her face, or tapping the screen. In my training 
and experience, users of Apple devices that offer Touch ID or Face ID often enable it because it is 
considered to be a more convenient way to unlock the device than by entering a numeric or 
alphanumeric passcode or password, as well as a more secure way to protect the device’s contents. 

63. In some circumstances, Touch ID or Face ID cannot be used to unlock a device that 
has either security feature enabled, and a passcode or password must be used instead. These 
circumstances include: (1) when the device has just been turned on or restarted; (2) when more 
than 48 hours has passed since the last time the device was unlocked; (3) when the passcode or 
password has not been entered in the last 6 days, and the device has not been unlocked via Touch 
ID in the last 8 hours or the device has not been unlocked via Face ID in the last 4 hours; (4) the 
device has received a remote lock command; or (5) five unsuccessful attempts to unlock the device 
via Touch ID or Face ID are made. 

64. The passcodes or passwords that would unlock the Subject Devices are not known 
to law enforcement. Thus, it will likely be necessary to press the fingers of the user of the Subject 
Devices to the devices’ Touch ID sensor, or hold the Subject Devices in front of the user’s face to 
activate the Face ID sensor, in an attempt to unlock the devices for the purpose of executing the 
search authorized by this warrant. Attempting to unlock the relevant Apple devices via Touch ID 
with, the use of the fingerprints of the user, or via Face ID by holding the device in front of the 
user’s face, is necessary because the government may not otherwise be able to access the data 
contained on those devices for the purpose of executing the search authorized by this warrant. 
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65. Based on these facts and my training and experience, it is likely that Cohen is the 
user of the Subject Devices, and thus that his fingerprints are among those that are able to unlock 
the Subject Devices via Touch ID or his face is able to unlock the Subject Devices via Face ID. 

66. Although I do not know which of a given user’s 10 fingerprints is capable of 
unlocking a particular device, based on my training and experience 1 know that it is common for a 
user to unlock a Touch ID-enabled Apple device via the fingerprints on thumbs or index fingers. 
In the cventlhat law enforcement is unableTo unloclCtfie Subject Devices as'described above 
within the five attempts permitted by Touch ID, this will simply result in the device requiring the 
entry of a password or passcode before it can be unlocked. 

67. I also know from my training and experience, and my review of publicly available 
materials published by Apple that Apple brand devices, such as the Subject Devices, have a feature 
that allows a user to erase the contents of the device remotely. By logging into the Internet, the 
user or any other individual who possesses the user’s account information can take steps to 
completely wipe the contents of the device, thereby destroying evidence of criminal conduct, along 
with any other information on the device. The only means to prevent this action is to disable the 
device’s ability to connect to the Internet immediately upon seizure, which requires either access 
to the device itself to alter the settings, or the use of specialized equipment that is not consistently 
available to law enforcement agents at every arrest. 

68. Due to the foregoing, I request that the Court authorize law enforcement to press 
the fingers (including thumbs) of Cohen to the Touch ID sensors the Subject Devices, or hold the 
Subject Devices in front of Cohen’s face, for the purpose of attempting to unlock the Subject 
Devices via Touch ID or Face ID in order to search the contents as authorized by this warrant. 
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C. Review of ESI 

69. Following seizure of any computer devices and storage media and/or the creation 
of forensic image copies, law enforcement personnel (including, in addition to law enforcement 
officers and agents, and depending on the nature of the ESI and the status of the investigation and 
related proceedings, attorneys for the government, attorney support staff, agency personnel 
assisting the government in this investigation, and outside technical experts under government 
control) will review the ESI contained therein for information responsive to the warrant'. 

70. In conducting this review, law enforcement personnel may use various techniques 
to determine which files or other ESI contain evidence or fruits of the Subject Offenses. Such 
techniques may include, for example: 

• surveying directories or folders and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• conducting a file-by-file review by “opening” or reading the first few “pages” of such 
files in order to determine their precise contents (analogous to performing a cursory 
examination of each document in a file cabinet to determine its relevance); 

• “scanning” storage areas to discover and possibly recover recently deleted data or 
deliberately hidden files; and 

• performing electronic keyword searches through all electronic storage areas to 
determine the existence and location of data potentially related to the subject matter of 
the investigation 34 ; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 


34 Keyword searches alone are typically inadequate to detect all relevant data. For one thing, 
keyword searches work only for text data, yet many types of files, such as images and videos, do 
not store data as searchable text. Moreover, even as to text data, there may be information properly 
subject to seizure but that is not captured by a keyword search because the information does not 
contain the keywords being searched. 
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71. Law enforcement personnel will make reasonable efforts to restrict their search to 
data falling within the categories of evidence specified in the warrant. Depending on the 
circumstances, however, law enforcement personnel may need to conduct a complete review of all 
the ESI from seized devices or storage media to evaluate its contents and to locate all data 

responsive to die warrant. 

D. Return of ESI 

72. If the Government determin^tfiat the electronic devices-aremo longer necessary 
to retrieve and preserve the data, and the devices themselves are not subject to seizure pursuant to 
Federal Rule of Criminal Procedure 41(c), the Government will return these items, upon request. 
Computer data that is encrypted or unreadable will not be returned unless law enforcement 
personnel have determined that the data is not (i) an instrumentality of the offense, (u) a tmit ol 
the criminal activity, (Hi) contraband, (iv) othenvise unlawfully possessed, or (v) evidence of the 

Subject Offenses. 
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IV. Conclusion and Ancillary Provisions 

73. Based on the foregoing, I respectfully request the court to issue a warrant to seize 
the items and information specified in Attachments A. 3. C, D, E and F to this affidavit and to the 
Search and Seizure Warrants. 

74. In light of the confidential nature of the continuing investigation, I respectfully 
request that this affidavit and all papers submitted herewith he maintained under seal until the 
Court orders otherwise. 



Special Agent 
FBI 


Sworn to before me on 
8th day of April, 2018 


Lf\ 


i i. Prttw 

HON. HENIC 

If B. PITMAN 


UNITED STATES MAGISTRATE JUDGE 
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A.0 93 (SDNYRjw. 05/10) Search and Seizure Warrant 


United States District Court 

for the 

Southern District of New York 


In the Matter of the Search of ) 

(Briefly describe the property to be searched ) ' 

or Identify the person by name and address) ) Case No, 

Loews Regency Hotel, 540 Park Avenue, Room 1728, } 

New York, New York 10065, and any dosed ' 

containers/items contained therein, See Attachment D 

._- - __SEARGHLAND-SEIZIIREJVARRANH 


To: Any authorized law enforcement officer 

- An applicationbyafedcrall^w^ofcemmroffi^^wan-attoraey for the govermnerit requests the search- 

of the following person or property located in the Southern _ District of - blew York - 


f identify the person or desdibe the property to be searched and give its location/. , , , _»_i_ 

Loews Regency Hotel, 540 Park Avenue, Room 1726, New York, New York 10065, and any dosed containers/items 
contained therein, See Attachment D 

The person or property to be searched, described above, is believed to conceal (Identify the person or describe the 
property to be seized) 1 : 


See Attachment D 


I 

property. 


find that the affidavits)* or any recorded testimony* establish probable cause to search and seize the person oi 

_ 


YOU ABE COMMANDED to execute this warrant on or before_ 

(hot to exceed 14 dttytt) 

szf in the daytime 6:00 a.m. to 10 p.m, □ at any time in the day or night as I find reasonable cause has been 

established. 


Unless delayed notice is authorized below* yon must give a copy of the warrant and a receipt for the properly 
taken to the person from whom* or from whose premises* the property was taken* or leave the copy and receipt at the 
place where the properly was taken 

The officer executing this warrant* or an officer present during the execution of the Warrant, must prepaie an 
inventory as required by law and promptly return this warrant and inventory to the Clerk of the Court. 

Uuon its return, this warrant and inventory should he filed under seal by the Clerk of the Court*- 

--- - ---" USMJInitials 


H I find that immediate notification may have an adverse result listed in 18 U.S.C. § 2705 (except for delay 
of trial)* and authorize the officer executing this warrant to delay notice to the person who* or whose property* will be 

Searched or seized (check the appropriate box) □ for _days (not to exceed 30% 

□until* the foots justifying, the later specific date of _ 

Date and time issued: ZlIfLr *- A/ tigr\Cy--1-- 

V f Judge $ signature 

City and state: New York. NY _ „_ Hon. He nr y 3. Pitman, U.g, Magistrate Judge -- 

Printed name and title 
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Return 



Case No,: 

Date and time warrant executed: 

Copy of warrant and inventory left with: 


Inventory made in the present 

;e of: 


Inventory of the properly taken and name of any person(s) seized: 







f 


I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court 




Executing officer’s signature 




Printed name and tide 






































































Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 185 of 201 


ATTACHMENT D 

X Premises to be Searched—Subject Prenrises-4 

The premises to be searched (“Subject Premises-4”) are described as follows, and include 
electronic devices, and all locked and closed containers found therein; 

Room 1728 located inside the Loews Regency Hotel at 540 Park Avenue, New York, New 
York 10065. The building is a luxury hotel located on Park Avenue and 61st Street Subject 
Premises-4 is located on the 17th floor of the hotel. 


It—Itesasto Be-Seizcd 


A Evidence, Fruits, and Instrumentalities of the Subj ect Offenses 

The items to be seized from Subject Premises-4 are evidence; fruits, and instrumentalities 
of violations of 18 U.S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

1 a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 

medallions, from January 1 ? 2013 to the present. 


b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/ol* 
entiti.es associated with him to tr ansfer any interest in taxi medallions, and any associated debts or 
liabilities, to others, including te and/or entities associated with him. 


Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose, 


c. 


d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 


e. Evidence of income to Michael D. Cohen & Associates, including any documents 
thatjndicate the nature and puipose of payments made to or fromMichael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. ; 


f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities,'including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 


Cohen and 


felRtinff to agteeiiien ts, loans, and/or financial transactions between 
and/or entities controlled by 
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present. 


p. Communications, records* documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source offends flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1,2013 to the present. 

q. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information felling within the categories 
set forth in Section ILA of this Attachment above, including, but not limited to, a MacBoofc Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk 
drives, tomb drives, and personal digital assistants. In lieu of seizing any such computer devices 
or storage media, this warrant also authorizes thecopying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media; including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 

devices-dFstorage-media^-mcluding-any-hardwai'e^oi'-software-mafiuals-or-olLher-informaSHn- 

concerning the configuration of the seized or copied computer devices or storage media. 

■- 3 _-Any evidence concerning the identities or locations of those persons with access .to, 

control over, or ownership of the seized or copied computer devices or storage media. 


C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in. addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel a ssisting the government in this investigation, and outside technical experts under 
government control) are authorized to review the ESI contained therein for information responsive 
to the warrant. 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example: 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• opening or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through ail electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 


15 

2017.08.02 













Case l:18-cr-00602-WHP Document 43-2 Filed 03/19/19 Page 188 of 201 


Law enforcement personnel will make reasonable efforts to search, only for files, 
documents, or other electronically stored information within the categories identified in Sections 
IIA and II.B of this Attachment However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “Alter team,” separate and apart from the investigative team, in order to 
■address-potential-privileges.--——=-—— --— : - 
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IV. Conclusion and Ancillary Provisions 

73. Based on the foregoing, I respectfully request the court to issue a warrant to seize 
the items and information specified in Attachments A, B s C, D, E and.F to this affidavit and to the 
Search and Seizure Warrants. 

74. In light of the confidential nature of the continuing investigation, I respectfully 
request that this affidavit and all papers submitted herewith be maintained under seal until the 
Court orders otherwise. 



Special Agent 


FBI 



HON. HENRY B. PITMAN ' 

UNITED STAGES •.MAGISTRATE JUDGE 
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United States District Court 


for the 


Southern District of New York 


In the Matter of the Search of 

(Briefly describe the property to be searched 
or identify the person by name and address) 

Loews Regency Hotel, 540 Park Avenue, Room 1628, 
New York, New York 10065, and any closed 
containers/items contained therein, See Attachment A 


) 

) 

) 

) 

) 

) 


18MAG 2968 

i No. V 


SEARCH AND SEIZURE WARRANT 


To: Any authorized law enforcement officer 

An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the _ Southern District of _ New York _ 

(identify the person or describe the property to he searched and give its location): 

Loews Regency Hotel, 540 Park Avenue, Room 1628 (a suite encompassing rooms 1628,1629, and 1630) 
(collectively, “Room 1628*), New York, New York 10065, and any closed containers/items contained therein, See 
Attachment A 

The person or property to be searched, described above, is believed to conceal (identify the person or describe the 
property to be seized) l 

See Attachment A 

I find that the affidavits), or any recorded testimony, establish probable cause to search and seize the person or 
property* 

YOU ARE COMMANDED to execute this warrant on or before ? . ■ ' __ 

(not to exceed 14 days) 

8f in the daytime 6:00 a.m. to 10 p.m. □ at any time in the day or night as 1 find reasonable cause has been 

established* 

Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the 
place where the property was taken. 

The officer executing this warrant, or an officer present during the execution of the warrant, must prepare an 
inventory as required by law and promptly return this warrant and inventory to the Clerk of the Court 

□ Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court* 

USXfJ Initials 

■ * \ 

□ I find that immediate notification may have an adverse result listed in 18 U.S.C. § 2705 {except for delay 

of trial), and authorize the officer executing this warrant to delay notice to the person who, or whdse property, will be, 
searched or seized (check the appropriate box) Ofor ____ days (not to exceed 30), , 

□until, the facts justifying, the later specific date 6f _ ■ ■, 

Date and time issued: H ~ v r ~ / / 

■''? /?/?? 

City and state: New York. NY _ _ Hon. Henry B Pitman. U S. Magistrate Judge 

Printed name and tide 




Judge f s signatory 
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AO 93 (Kiev. 01rt)9) Search and Seizure Warrant (Plage 2) 



Return 


Case No.: 

Date and time warrant executed: 

Copy of warrant and inventory left with: 

Inventory made in the presence of: 


Inventory of the property taken and name of any person(s) seized: 



Certification 

I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court* 


Date:_ _._„ 

Executing officer's signature 


Printed name and title 
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ATTACHMENT A 

I. Premises to be Searched—Subject Premises-4 

The premises to be searched (“Subject Premises-4”) are described as follows, and include 
electronic devices, and all locked and closed containers found therein: 

Room 1628 (a suite encompassing rooms 1628, 1629, and 1630) (collectively, “Room 
1628”), located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 
10065. The building is a luxury hotel located on Park Avenue and 61st Street. Subject Premises- 
4 is located on the 16th floor of the hotel. 

H. Items to Be Seized 


A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 

The items to be seized from Subject Premises-4 are evidence, fruits, and instrumentalities 
of violations of 18 U.S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§, 30116(a)(1)(A) and 30109(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 
medallions, from January 1, 2013 to the present. 

b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or 

entities associated with him to transfer anv interest in taxi medallions, and any associated debts or 
liabilities, to others, including to and/or entities associated with him. 

c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 

d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 

e. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 

f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and a nn ual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 

g. Evidence relating to agreements, loans, and/or financial transactions between 

Cohen and and/or entities controlled by 
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relating to Cohen’s bank accounts, taxes, debts, and/or finances, from January 1, 2013 to the 
present. 


p. Communications, records, documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1, 2013 to the present. 

q. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information falling within the categories 
set forth in Section II.A of this Attachment above, including, but not limited to, a MacBook Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk 
drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices 
or storage media, this warrant also authorizes the copying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media, including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 

3. Any evidence concerning the.identities or locations of those persons with access to, 
control over, or ownership of the seized or copied computer devices or storage media. 

C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel assisting the government in this investigation, and outside technical experts under 
government control) are authorized to review the ESI contained therein for information responsive 
to the warrant. 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example: 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• opening or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through all electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
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Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Sections 
II. A and II.B of this Attachment, However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “filter team,” separate and apart from the investigative team, in order to 
address potential privileges. 
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AO 93 (SDNY Rev. 05/10) Search and Seizure Warrant 


United States District Court 

for the 

Southern District of New York 
In the Matter of the Search of ) 

(Briefly describe the property to he searched ) 

or identify the person by name and address) ) Case No. 

Loews Regency Hotel, 540 Park Avenue, Room 1628, J 
New York, New York 10065, and any closed ' 

containers/items contained therein, See Attachment A ' 

SEARCH AND SEIZURE WARRANT 

To: Any authorized law enforcement officer 

An application by a federal law enforcement officer or an attorney for the government requests the search 
of the following person or property located in the _ Southern District of _ New York _ 

(identify the person or describe the property to be searched and give its location)** 

Loews Regency Hotel, 540 Park Avenue, Room 1628 (a suite encompassing rooms 1628,1629, and 1630) 
(collectively, “Room 1628"), New York, New York 10065, and any closed containers/items contained therein, See 
Attachment A 

The person or property to be searched, described above, is believed to conceal (identify the person or describe the 
property to be seized): 

See Attachment A 


I find that the affidavit(s), or any recorded testimony, establish probable cause to search and seize the person or 


property. 


YOU ARE COMMANDED to execute this warrant on or before 


(not to exceed 14 days) 

Sf in the daytime 6:00 a.m. to 10 p.m. O at any time in the day or night as I find reasonable cause has been 

established. 


Unless delayed notice is authorized below, you must give a copy of the warrant and a receipt for the property 
taken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at the 
place where the property was taken. 

The officer executing this warrant, or an officer present during, the execution of the warrant, must prepare an 
inventoiy as required by law and promptly return this warrant and inventory to the Clerk of the Court. 

□ Upon its return, this warrant and inventory should be filed under seal by the Clerk of the Court._ 

USMJ Initials 

□ I find that immediate notification may have an adverse result listed in 18 U.S.C. § 2705 (except for delay 

of trial), and authorize the officer executing this warrant to delay notice to the person who, or whose property, will be 
Searched or seized (check the appropriate box) Ofor _ days (not to exceed 30). 

□until, the facts justifying, the later specific date of _ 


Date and time issued: ^ ""‘I |S j 

'4 

1 ' 

iWy b 


f Judge s signature 


City and state: New York. NY _ _ Hon. Henry B. Pitman. U.S. Magistrate Judge 

Printed name and title 
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AO 93 (Rev. 01/09) Search and Seizure Warrant {Page 2) 



Return 


Case No.: 

Date and time warrant executed: 

Copy of warrant and inventory left with: 

Inventory made in the presence of: 



Inventory of the property taken and name of any person(s) seized; 


Certification 


I declare under penalty of perjury that this inventory is correct and was returned along with the original warrant 
to the Court. 


Date; _ _ 

Executing officer's signature 


Printed name and title 
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ATTACHMENT A 

I. Premises to be Searched—Subject Premises-4 

The premises to be searched (“Subject Premises-4”) are described as follows, and include 
electronic devices, and all locked and closed containers found therein: 


Room 1628 (a suite encompassing rooms 1628, 1629, and 1630) (collectively, “Room 
1628”), located inside the Loews Regency Hotel at 540 Park Avenue, New York, New York 
10065. The building is a luxury hotel located on Park Avenue and 61st Street. Subject Premises- 
4 is located on the 16th floor of the hotel. 

II. Items to Be Seized 

A. Evidence, Fruits, and Instrumentalities of the Subject Offenses 

The items to be seized from Subject Premises-4 are evidence, fruits, and instrumentalities 
of violations of 18 U.S.C. §§ 371 (conspiracy, as it pertains to the other Subject Offenses), 1005 
(false bank entries), 1014 (false statements to a financial institution), 1343 (wire fraud), and 1344 
(bank fraud), and 52 U.S.C. §§ 30116(a)(1)(A) and 30109(d)(l)(A)(l) (illegal campaign 
contributions) (the “Subject Offenses”), described as follows: 

a. Evidence relating to Sterling National Bank, Melrose Credit Union, and/or taxi 
medallions, from January 1, 2013 to the present. 


b. Evidence relating to a plan, proposal, or agreement for Michael Cohen and/or 
entities associated with him to transferanvjnterest in taxi medallions, and any associated debts or 

md/or entities associated with him. 


liabilities, to others, including to 


c. Evidence relating to a plan, proposal, or agreement to modify loans that Cohen has 
with Sterling and/or Melrose. 


d. Evidence relating to Essential Consultants, LLC, including any documents that 
indicate the nature and purpose of payments made to or from Essential Consultants or the nature 
of any work done by Cohen or any other individuals in connection with Essential Consultants. 


e. Evidence of income to Michael D. Cohen & Associates, including any documents 
that indicate the nature and purpose of payments made to or from Michael D. Cohen & Associates, 
or evidence of the purpose of accounts opened in the name of Michael D. Cohen & Associates. 


f. Evidence relating to Cohen’s net worth, available cash and cash equivalents, 
monthly and annual income, income sources, and other assets, whether held personally or through 
entities, including tax returns, personal financial statements, and bank records, from January 1, 
2013 to the present. 


g. Ev idence relating to agreements, loans, and/or financial transaction^ bet ween 
Cohen and and/or entities controlled by 
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and/or other accountants, 


o. Communications with others, including 
relating to Cohen’s bank accounts, taxes, debts, and/or finances, from January 1, 2013 to the 
present. 


p. Communications, records, documents, and other files reflecting false 
representations to a financial institution related to the intended purpose of an account or loan at 
that financial institution; the nature of any business or entity associated with an account at a 
financial institution; the source of funds flowing into an account; or the purpose or nature of any 
financial transactions involving that financial institution, from January 1,2013 to the present. 

q. Evidence of Cohen’s intent as it relates to the Subject Offenses under investigation. 

B. Search and Seizure of Electronically Stored Information 

The items to be seized from Subject Premises-4 also include any computer devices and 
storage media that may contain any electronically stored information falling within the categories 
set forth in Section II.A of this Attachment above, including, but not limited to, a MacBook Pro, 
any other desktop and laptop computers, any Apple iPhone or other cellphone or smartphone 
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belonging to Michael Cohen or in his possession, an Apple iPad Mini, portable hard drives, disk 
drives, thumb drives, and personal digital assistants. In lieu of seizing any such computer devices 
or storage media, this warrant also authorizes the copying of such devices or media for later review. 

The items to be seized from Subject Premises-4 also include: 

1. Any items or records needed to access the data stored on any seized or copied 
computer devices or storage media, including but not limited to any physical keys, encryption 
devices, or records of login credentials, passwords, private encryption keys, or similar information. 

2. Any items or records that may facilitate a forensic examination of the computer 
devices or storage media, including any hardware or software manuals or other information 
concerning the configuration of the seized or copied computer devices or storage media. 

3. Any evidence concerning the.identities or locations of those persons with access to, 
control over, or ownership of the seized or copied computer devices or storage media. 

C. Review of ESI 

Following seizure of any computer devices and storage media and/or the creation of 
forensic image copies, law enforcement personnel (which may include, in addition to law 
enforcement officers and agents, attorneys for the government, attorney support staff, agency 
personnel assisting the government in this investigation, and outside technical experts under 
government control) are authorized to review the ESI contained therein for information responsive 
to the warrant. 

In conducting this review, law enforcement personnel may use various techniques to locate 
information responsive to the warrant, including, for example: 

• surveying various file “directories” and the individual files they contain (analogous to 
looking at the outside of a file cabinet for the markings it contains and opening a drawer 
believed to contain pertinent files); 

• opening or cursorily reading the first few “pages” of such files in order to determine 
their precise contents; 

• scanning storage areas to discover and possibly recover recently deleted files or 
deliberately hidden files; 

• performing key word searches through all electronic storage areas to determine whether 
occurrences of language contained in such storage areas exist that are intimately related 
to the subject matter of the investigation; and 

• reviewing metadata, system information, configuration files, registry data, and any 
other information reflecting how, when, and by whom the computer was used. 
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Law enforcement personnel will make reasonable efforts to search only for files, 
documents, or other electronically stored information within the categories identified in Sections 
11, A and 1I.B of this Attachment. However, law enforcement personnel are authorized to conduct 
a complete review of all the ESI from seized devices or storage media if necessary to evaluate its 
contents and to locate all data responsive to the warrant. 

Additionally, review of the items described in this Attachment shall be conducted pursuant to 
established procedures designed to collect evidence in a manner reasonably designed to protect 
any attorney-client or other applicable privilege. When appropriate, the procedures shall include 
use of a designated “filter team,” separate and apart from the investigative team, in order to 
address potential privileges. 
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